CVE-2019-3980 File upload in SolarWinds Dameware Remote Mini Remote Client Agent Service
An unauthenticated remote attacker can upload and execute arbitrary code with Local System privileges via the smart card authentication feature.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3980?
CVE-2019-3980 is a critical vulnerability in SolarWinds Dameware Remote Mini Remote Client Agent Service, published on 8 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.
Weakness: CWE-346
Which versions are affected by CVE-2019-3980?
It affects 1 product.
Products include Solarwinds Dameware Mini Remote Control.
How do I fix CVE-2019-3980?
No fix has been published for CVE-2019-3980 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3980 being exploited?
There is no known exploitation of CVE-2019-3980 in the wild and no public exploit code.
Public exploit code: 4 proofs of concept on GitHub.
Other vulnerabilities in SolarWinds Dameware Remote Mini Remote Client Agent Service
Sources
Also known as GHSA-9qx2-7jwx-q6pj.