CVE-2019-3980
CRITICAL EXPLOITEDSolarwinds Dameware Mini Remote Control 12.1.0.89 - Unauthenticated Remote Code Execution via Smart Card Authentication
Title source: llmExploitation Summary
CVE-2019-3980 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including warferik, Barbarisch, CyberQuestor-infosec.
AI-analyzed exploit summary This PoC exploits CVE-2019-3980 in Dameware Remote Support to achieve remote code execution by uploading and executing a custom C# executable via a Python script that handles communication and command execution.
Description
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run under the Local System account.
Exploits (4)
This PoC exploits CVE-2019-3980 in Dameware Remote Support to achieve remote code execution by uploading and executing a custom C# executable via a Python script that handles communication and command execution.
This repository contains a C++ PoC exploit for CVE-2019-3980, a vulnerability in SolarWinds Dameware Remote Support. The exploit leverages a modified OpenSSL library to perform a Diffie-Hellman key exchange with weakened parameters, enabling remote code execution.
This repository contains a functional proof-of-concept exploit for CVE-2019-3980, targeting OpenNetAdmin v18.1.1. The exploit leverages command injection via the `xajaxargs[]` parameter to achieve unauthenticated remote code execution, delivering a reverse shell.
This repository contains a functional Python exploit for CVE-2019-3980, an unauthenticated RCE vulnerability in SolarWinds Dameware MRC. The exploit implements the full protocol handshake to bypass smart card authentication and execute arbitrary payloads as SYSTEM.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H