Exploit for #VU22187 Input validation error in Dameware Mini Remote Client agent and Dameware Remote Mini Control

Vulnerability identifier: #VU22187

Vulnerability risk: High

CVSSv4.0: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber]

CVE-ID: CVE-2019-3980

CWE-ID: CWE-20

Exploitation vector: Network

Exploits in database: 1

• October 20, 2021
  • CVE-2019-3980 (CVE-2019-3980 exploit written in win32/c++ (openssl dependency). Port of https://github.com/tenable/poc/blob/master/Solarwinds/Dameware/dwrcs_dwDrvInst_rce.py) [Github]

Vulnerable software:
Dameware Mini Remote Client agent
Client/Desktop applications / Software for system administration
Dameware Remote Mini Control
Server applications / SCADA systems

Vendor: SolarWinds