vulnerability

SolarWinds DameWare Mini Remote Control: CVE-2019-3980: Origin Validation Error

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Oct 8, 2019

Added

Mar 4, 2021

Modified

Jun 22, 2026

Description

The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.

Solution

solarwinds-dameware-mini-remote-control-upgrade-latest

References

CVE-2019-3980
https://attackerkb.com/topics/CVE-2019-3980
https://www.tenable.com/security/research/tra-2019-43
https://www.tenable.com/security/research/tra-227-43
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-13587
CWE-346
EUVD-EUVD-2019-13587

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report