CVE-2019-3980

The SolarWinds Dameware Mini Remote Control (MRC) client agent is vulnerable to unauthenticated remote code execution (RCE) due to an origin validation error in the Smart Card Authentication component. An attacker can exploit a flaw where the service accepts and executes an attacker-controlled fi...

CVE-2019-3957

Dameware Remote Mini Control (SolarWinds)

CVE-2021-31217

The CVE-2021-31217 entry affects SolarWinds DameWare Mini Remote Control Server 12.0.1.200, where insecure file permissions enable arbitrary file deletion as SYSTEM due to overly permissive folders. The issue is documented across multiple sources (NVD, Red Hat, Nessus plugin, CVE lists, CNNVD) wi...

CVE-2019-9017

CVE-2019-9017 affects SolarWinds DameWare Mini Remote Control 10.0 x64 (DWRCC component). The issue is a Buffer Overflow tied to the size field of the machine name, as described in multiple sources. Affected software/version details are limited to 10.0 x64; root cause is improper handling of the ...

CVE-2018-12897

The affected software is SolarWinds DameWare Mini Remote Control. CVE-2018-12897 describes a local SEH-based buffer overflow in DameWare Mini Remote Control before v12.1. The vulnerability targets the host component and arises from improper handling of input in the host/AMT dialog context, enabli...

CVE-2015-8220

CVE-2015-8220 affects SolarWinds DameWare Mini Remote Control (before 12.0 HotFix 1). The vulnerability is a stack-based buffer overflow in the DWRCC.exe URI handler that can be triggered by a crafted command line argument in a link, enabling remote code execution. An unauthenticated attacker cou...

CVE-2004-1852

DameWare Mini Remote Control is affected. Versions 3.x prior to 3.74 and 4.x prior to 4.2 transmit the Blowfish encryption key in plaintext, allowing remote attackers to retrieve sensitive information. Affected: 3.x up to 3.73 and 4.x up to 4.1. Root cause: encryption key exposed in transit. Impa...