This guide is intended for SolarWinds customers or prospects who have purchased or want to evaluate stand-alone versions of Dameware Remote Support or Dameware Mini Remote Control. After the evaluation period, you can convert your evaluation license to a production license by obtaining and applying a license key. If you are not yet a customer, and are interested in evaluating Dameware, you can download Remote Support or Mini Remote Control, fully-functional for 14 days. If you are a customer, you have purchased either a centralized version of Dameware, or a stand-alone version of Dameware. SolarWinds patches the vulnerability, and all is right again.If you prefer, you can view this guide as a PDF.ĭameware Remote Support and Mini Remote Control provide you with tools to troubleshoot and manage systems and support end users. So, Tenable completes the responsible disclosure, whips up this awesome POC, and you get a nice little CVE to boot. The cool thing about that particular service? It runs as SYSTEM. This allows a user to upload an executable on a host where the SolarWinds Dameware Remote Mini Remote Client Agent Service (DWRCS.exe) is running. You see, the Dameware Mini Remote Client agent supports smart card authentication by default. Well, Tenable discovered a nifty little flaw in a version released in 2019. On the website, it’s described as “affordable remote control software for all your customer support and help desk needs.” Sounds pretty handy, right? SolarWinds Dameware Mini Remote Control is one such offering.

SolarWinds has been on the scene since 1999, and their products and solutions can be found in networks worldwide.

SolarWinds! You hear the name and immediately think “solutions management” or big screens full of more network information than you can shake a stick at. By David Boyd in Penetration Testing, Security Testing & Analysis

Dameware products solarwinds