dameflare

DameFlare SolarWinds Dameware MRC 智能卡认证绕过导致未认证 RCE CVE-2019-3980 | CVSS 9.8 严重 | TCP/6129 原始研究与 POC：Tenable, Inc. TRA-2019-43 Python 3 工具：David Boyd @Fir3d0g 工作原理 Dameware MRC 在 TCP/6129 上暴露远程控制服务（DWRCS.exe）。在智能卡认证握手期间，服务器接受攻击者控制的文件作为智能卡驱动安装程序（dwDrvInst.exe），并以 SYSTEM 权限执行，无需任何认证。 DameFlare...

CVE-2019-3980

The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run...

CVE-2019-3980

creationtimestamp| type| source ---|---|--- 2025-01-31 18:00:06+00:00| published-proof-of-concept| https://t.me/truesecator/6687 2025-02-01 23:08:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lh5my6vacb2f 2026-08-26 20:00:03+00:00| published-proof-of-concept|...

Exploit for Origin Validation Error in Solarwinds Dameware_Mini_Remote_Control

CVE-2019-3980 CVE-2019-3980 exploit written in win32/c++ open...

Exploit for Origin Validation Error in Solarwinds Dameware_Mini_Remote_Control

CVE-2019-3980 This repo was created to utilize the Nessus POC...

CVE-2019-3980

CVE-2019-3980 affects SolarWinds DameWare Mini Remote Control (DameWare Mini Remote Client) 12.1.0.89. The issue stems from the SmartCard authentication component, which allows a user to upload an executable to be run on the DWRCS.exe host due to unclear validation/confirmation. An unauthenticate...