Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-3980

33
FAUCET Score

CVE-2019-3980 is a critical vulnerability affecting SolarWinds Dameware Mini Remote Control agent v12.1.0.89. It allows an unauthenticated, remote attacker to upload and execute arbitrary code under the Local System account by exploiting the smart card authentication feature. This vulnerability has a CVSS score of 9.8 (CRITICAL) due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, its high EPSS and FAUCET Risk Score indicate a significant potential threat.

Impacted Technologies

VendorProductVersion(s)CPE
12.1.0.89CPE matchmatch criteria
cpe:2.3:a:solarwinds:dameware_mini_remote_control:12.1.0.89:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
5.18%
Probability of exploitation in next 30 days
EPSS Percentile
91.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0518 is in the 86th percentile among its peer group of 36,897 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (6)

aristavendor investigatingvia llm_extracted
naturalintelligencevendor investigatingvia llm_extracted
netgearvendor investigatingvia llm_extracted
opencartvendor investigatingvia llm_extracted
payloadcmsvendor investigatingvia llm_extracted
safarivendor investigatingvia llm_extracted

Vendor Advisories (6)

netgearllm-netgear-028a4e657168339cCRITICAL

SolarWinds Dameware Mini Remote Control Unauthenticated RCE

Sep 30, 2019
aristallm-arista-eca34bad6ad7bce0CRITICAL

SolarWinds Dameware Mini Remote Control Unauthenticated RCE

Sep 30, 2019
opencartllm-opencart-cea40f48f862d9bcCRITICAL

SolarWinds Dameware Mini Remote Control Unauthenticated RCE

Sep 30, 2019
safarillm-safari-2e79a554189d2505CRITICAL

SolarWinds Dameware Mini Remote Control Unauthenticated RCE

Sep 30, 2019
naturalintelligencellm-naturalintelligence-75514af8183069a0CRITICAL

SolarWinds Dameware Mini Remote Control Unauthenticated RCE

Sep 30, 2019
payloadcmsllm-payloadcms-a573999e1092858fCRITICAL

SolarWinds Dameware Mini Remote Control Unauthenticated RCE

Sep 30, 2019

References

tenable.com / security/research/tra-2019-43
Third Party Advisory
tenable.com / security/research/tra-227-43
ExploitThird Party Advisory