Skip to content
OpenAdvisories
Unscored CVE-2019-3957 EUVD-2019-13564GHSA-r8ch-wqmp-x6mp

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly…

Published Jun 7, 2019 · Updated Aug 4, 2024 · Assigned by tenable

Description

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information.

Affected products

VendorProductAffectedFixed
— Solarwinds Dameware Remote Mini Controller All versions prior to version 12.1.0.34 —

References