Read the docs

Dameware

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Dameware records in CISA KEV

No Dameware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Remote Mini Control 2 records MEDIUM Mini Remote Control 1 record HIGH

Records

3 records

TI-2019-02960 CVE-2019-3955 · GHSA-hmqv-5rff-997q

Out-of-bounds write in Solarwinds Dameware Remote Mini Controller

Priority MEDIUM 50

Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the server not properly validating RsaPubKeyLen during key negotiation.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.17911 Published 2019-06-07 No fix listed CWE-787
TI-2019-02961 CVE-2019-3956 · GHSA-8w7p-q234-6qwj

Out-of-bounds read in Solarwinds Dameware Remote Mini Controller

Priority LOW 36

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the applicat…

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.01633 Published 2019-06-07 No fix listed CWE-125
Open these records in search →