DM
Product
Dameware Mini Remote Control
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add Dameware Mini Remote Control to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3980 | 9.8 | Oct 8 | The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host Affected: 12.1.0.89 |
| CVE-2021-31217 | 9.1 | Jul 13 | In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM Affected: 12.0.1.200 |
| CVE-2018-12897 | 7.8 | Sep 7 | SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow Affected: before 12.1 |
| CVE-2019-9017 | 7.5 | May 2 | DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name Affected: 10.0 |
| CVE-2019-3957 | 7.4 | Jun 7 | Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key… Affected: through 12.1.0.34 |
| CVE-2015-8220 | – | Nov 17 | Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute arbitrary code via a… Affected: through 12.0 |
| CVE-2004-1852 | – | Mar 23 | DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information Affected: 3.0 before 3.74; 4.0 before 4.2 |
Showing 7