Buffer Overflow Vulnerability in SolarWinds DameWare Mini Remote Control
CVE-2018-12897

7.8HIGH

Key Information:

Vendor

Solarwinds
Status
Dameware Mini Remote Control
Vendor
CVE Published:
7 September 2018

What is CVE-2018-12897?

The buffer overflow vulnerability in SolarWinds DameWare Mini Remote Control versions before 12.1 allows attackers to exploit memory management issues. When an attacker sends specially crafted inputs, it can lead to execution of arbitrary code, potentially compromising the system's integrity. Users are strongly advised to update to the latest version to mitigate the risks associated with this vulnerability.

References

https://labs.nettitude.com/blog/solarwinds-cve-2018-12897...
x_refsource_MISC
http://packetstormsecurity.com/files/153668/DameWare-Remo...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.