Dameware Mini Remote Control

dameware_mini_remote_control

Vendor: Solarwinds • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-31217 1Solarwinds 1Dameware Mini Remote Control Jun 17, 2026 Jul 13, 2021 N/A· v4 9.1 CRITICAL· v3 9.4 HIGH· v2 In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.
CVE-2019-3980 1Solarwinds 1Dameware Mini Remote Control Jun 17, 2026 Oct 8, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can...Show more The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.Show less
CVE-2019-3957 1Solarwinds 1Dameware Mini Remote Control Jun 17, 2026 Jun 7, 2019 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the applica...Show more Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information.Show less
CVE-2019-9017 1Solarwinds 1Dameware Mini Remote Control Jun 17, 2026 May 2, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name.
CVE-2018-12897 1Solarwinds 1Dameware Mini Remote Control Nov 21, 2024 Sep 7, 2018 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.
CVE-2015-8220 1Solarwinds 1Dameware Mini Remote Control May 6, 2026 Nov 17, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute arbitrary code via a crafted commandline argument in a link.
CVE-2004-1852 1Solarwinds 1Dameware Mini Remote Control Apr 16, 2026 Mar 23, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.