CVE-2019-3956

Publication date

2019-06-07 20:01:28

Family

tenable

State

PUBLISHED

Description

Dameware Remote Mini Control version 12.1.0.34 and prior contains an unauthenticated remote buffer over-read due to the server not properly validating CltDHPubKeyLen during key negotiation, which could crash the application or leak sensitive information.