CVE-2019-3957: SolarWinds Dameware Mini Remote Control

High severity, CVSS 7.4. EPSS: 25.6% chance of exploitation in the next 30 days.

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating RsaSignatureLen during key negotiation, which could crash the application or leak sensitive information.

Affected products

• SolarWinds Dameware Mini Remote Control: up to and including 12.1.0.34

Published 2019-06-07. Last modified 2026-06-17.