Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-34079

36
FAUCET Score

CVE-2025-34079 is an authenticated remote code execution vulnerability in NSClient++ version 0.5.2.35, allowing an attacker with administrator credentials to execute arbitrary commands with SYSTEM privileges. This high-severity flaw (CVSS 7.8) leverages the web interface and ExternalScripts module, enabling full system compromise. While not yet observed in active exploitation, a Metasploit module exists, and the vulnerability has garnered significant community discussion, indicating a high potential for future exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
0.5.2.35CPE matchmatch criteria
cpe:2.3:a:nsclient:nsclient\+\+:0.5.2.35:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

7.5HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
HIGH
User Interaction
NONE
VS Confidentiality
HIGH
VS Integrity
HIGH
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
1.28%
Probability of exploitation in next 30 days
EPSS Percentile
67.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
Metasploit: NSClient++ 0.5.2.35 - ExternalScripts Authenticated Remote Code Execution · Oct 20, 2020
This CVE's current EPSS score of 0.0128 is in the 94th percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

raw.githubusercontent.com / rapid7/metasploit-framework/master/modules/exploits/windows/http/nscp_authenticated_rce.rb
Exploit
vulncheck.com / advisories/nsclient-localtoremote-system-compromise
ExploitThird Party Advisory
exploit-db.com / exploits/48360
ExploitVDB Entry