Dameware Mini Remote Control SolarWinds Dameware Mini Remote Control

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in SolarWinds Dameware Mini Remote Control.

By the Year

In 2026 there have been 0 vulnerabilities in SolarWinds Dameware Mini Remote Control. Last year, in 2025 Dameware Mini Remote Control had 1 security vulnerability published. Right now, Dameware Mini Remote Control is on track to have less security vulnerabilities in 2026 than it did last year.




Year Vulnerabilities Average Score
2026 0 0.00
2025 1 7.80
2024 0 0.00
2023 0 0.00
2022 0 0.00
2021 1 9.10
2020 0 0.00
2019 3 8.60
2018 1 7.80

It may take a day or so for new Dameware Mini Remote Control vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent SolarWinds Dameware Mini Remote Control Security Vulnerabilities

SolarWinds Dameware Mini RC LPE via Incorrect Permissions
CVE-2025-26396 7.8 - High - June 02, 2025

The SolarWinds Dameware Mini Remote Control was determined to be affected by Incorrect Permissions Local Privilege Escalation Vulnerability. This vulnerability requires local access and a valid low privilege account to be susceptible to this vulnerability.

Improper Privilege Management

In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions
CVE-2021-31217 9.1 - Critical - July 13, 2021

In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.

Incorrect Default Permissions

The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can
CVE-2019-3980 9.8 - Critical - October 08, 2019

The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.

Improper Input Validation

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation
CVE-2019-3957 7.4 - High - June 07, 2019

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information.

Out-of-bounds Read

DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name.
CVE-2019-9017 - May 02, 2019

DWRCC in SolarWinds DameWare Mini Remote Control 10.0 x64 has a Buffer Overflow associated with the size field for the machine name.

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.
CVE-2018-12897 7.8 - High - September 07, 2018

SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.

Buffer Overflow

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which
CVE-2004-1852 - March 23, 2004

DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for SolarWinds Dameware Mini Remote Control or by SolarWinds? Click the Watch button to subscribe.

SolarWinds
Vendor

subscribe