Buffer Overflow Vulnerability in SolarWinds Dameware Software
CVE-2020-5734

7.5HIGH

Key Information:

Vendor

Solarwinds
Status
Solarwinds Dameware
Vendor
CVE Published:
7 April 2020

What is CVE-2020-5734?

A classic buffer overflow vulnerability exists in SolarWinds' Dameware software. This flaw enables a remote attacker, without authentication, to exploit the ECDH key exchange process by sending an unusually large 'SigPubkeyLen' value. Such an exploit can lead to a denial of service, potentially disrupting operations and affecting system performance. Organizations using this software should consider immediate mitigation measures to safeguard against potential exploitation.

Affected Version(s)

SolarWinds Dameware 12.1 Hotfix 3

References

https://www.tenable.com/security/research/tra-2020-19
x_refsource_MISC

EPSS Score

25% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.