10
CVE-2019-3980
- EPSS 40.91%
- Veröffentlicht 08.10.2019 20:15:12
- Zuletzt bearbeitet 21.11.2024 04:42:59
- Quelle vulnreport@tenable.com
- CVE-Watchlists
- Unerledigt
LoginThe Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Solarwinds ≫ Dameware Mini Remote Control Version12.1.0.89
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 40.91% | 0.972 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-346 Origin Validation Error
The product does not properly verify that the source of data or communication is valid.