Buffer overflow in NetSupport Manager (NSM) Client 10.00 and 10.20, and NetSupport School Student (NSS) 9.00, allows remote NSM servers to cause a denial of service or possibly execute arbitrary code via crafted data in the configuration exchange phase of an initial connection setup. NOTE: a vendor statement, which is too vague to be sure that it is for this particular issue, says that only a denial of service is possible.
Conclusion & alert: CVE-2007-5252 is rated High Risk (67.7/100): CVSS Critical severity, with medium exploitation likelihood (EPSS 1.18%). Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-05-25 | 1.13% | 1.18% | +0.05% |
| 2 | 2025-03-30 | 3.11% | 1.13% | -1.98% |
| 3 | 2025-03-29 | — | 3.11% | — |
Full EPSS history (9 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 10.0 | 2.0 | HIGH |
|
10.0 | 10.0 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| netsupport | netsupport_manager_client | 10.00 | cpe:2.3:a:netsupport:netsupport_manager_client:10.00:*:*:*:*:*:*:* |
| netsupport | netsupport_manager_client | 10.20 | cpe:2.3:a:netsupport:netsupport_manager_client:10.20:*:*:*:*:*:*:* |
| netsupport | netsupport_school_student | 9.00 | cpe:2.3:a:netsupport:netsupport_school_student:9.00:*:*:*:*:*:*:* |