vulnerability

SolarWinds DameWare Mini Remote Control: (CVE-2019-3956)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:P)

Published

Jun 7, 2019

Added

Mar 4, 2021

Modified

Apr 7, 2026

Description

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the application or leak sensitive information.

Solution

solarwinds-dameware-mini-remote-control-upgrade-latest

References

CVE-2019-3956
https://attackerkb.com/topics/CVE-2019-3956
CWE-125
CWE-20
EUVD-EUVD-2019-13563
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13563
https://www.tenable.com/security/research/tra-2019-26

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report