Solarwinds Dameware Mini Remote Control
7 CVEs affecting Solarwinds Dameware Mini Remote Control. Latest disclosed: 2021-07-13. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3980 | Critical | 9.8 | 2019-10-08 | The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on… |
CVE-2021-31217 | Critical | 9.1 | 2021-07-13 | In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM. |
CVE-2018-12897 | High | 7.8 | 2018-09-07 | SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow. |
CVE-2019-9017 | High | 7.5 | 2019-05-02 | DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name. |
CVE-2019-3957 | High | 7.4 | 2019-06-07 | Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSigna… |
CVE-2015-8220 | | 2015-11-17 | Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute… | |
CVE-2004-1852 | | 2004-03-23 | DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensi… |