CVE-2019-3955: Dameware Remote Mini Control

High severity, CVSS 7.5. EPSS: 17.9% chance of exploitation in the next 30 days.

Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the server not properly validating RsaPubKeyLen during key negotiation. An unauthenticated remote attacker can cause a heap buffer overflow by specifying a large RsaPubKeyLen, which could cause a denial of service.

Affected products

• Dameware Remote Mini Control: up to and including 12.1.0.34

Published 2019-06-07. Last modified 2026-06-17.