TI-2019-02985 Aliases CVE-2019-3980 GHSA-9qx2-7jwx-q6pj

Origin validation error in SolarWinds Dameware Remote Mini Remote Client Agent Service

MEDIUM 50CWE-346Published 2019-10-08 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-346.

Summary

The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.

Why it matters now

EPSS 0.0518 92nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	SolarWinds Dameware Remote Mini Remote Client Agent Service	Versions up to and including 12.1.0.89	—	No fix listed	CNA

SolarWinds Dameware Remote Mini Remote Client Agent Service Vendor— Affected Versions up to and including 12.1.0.89 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:solarwinds:dameware_mini_remote_control:12.1.0.89:::::::*	12.1.0.89	Vulnerable	SolarWinds

cpe:2.3:a:solarwinds:dameware_mini_remote_control:12.1.0.89:*:*:*:*:*:*:* Versions 12.1.0.89 Vulnerable ·SolarWinds

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2019-3980
2026-10-03 Alias added: GHSA-9qx2-7jwx-q6pj

References

Exploit 1

https://www.tenable.com/security/research/tra-227-43

Advisory 1

https://www.tenable.com/security/research/tra-2019-43

TI-2019-02962 Out-of-bounds read in Solarwinds Dameware Remote Mini Controller CVSS 3.1HIGH 7.4
TI-2019-06503 DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow… CVSS 3.1HIGH 7.5
TI-2021-11431 In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM. CVSS 3.1CRITICAL 9.1
TI-2015-06774 Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini… CVSS 2.0HIGH 7.5
TI-2018-09265 SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow. CVSS 3.0HIGH 7.8
TI-2004-01727 DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish… CVSS 2.0MEDIUM 5.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences