Dameware Remote Support centralized also enables you to initiate Internet Sessions to support remote end users outside of your network.

The centralized version of Dameware offers the Dameware Central Server, which you can use to manage Dameware licenses, Global Host Lists, and Dameware users. SolarWinds patches the vulnerability, and all is right again.Dameware is comprised of two key products- Dameware Remote Support ( DRS) and Dameware Mini Remote Control ( MRC), and these are available in a stand-alone version or a centralized version. So, Tenable completes the responsible disclosure, whips up this awesome POC, and you get a nice little CVE to boot. The cool thing about that particular service? It runs as SYSTEM. This allows a user to upload an executable on a host where the SolarWinds Dameware Remote Mini Remote Client Agent Service (DWRCS.exe) is running.

You see, the Dameware Mini Remote Client agent supports smart card authentication by default. Well, Tenable discovered a nifty little flaw in a version released in 2019. On the website, it’s described as “affordable remote control software for all your customer support and help desk needs.” Sounds pretty handy, right? SolarWinds Dameware Mini Remote Control is one such offering. SolarWinds has been on the scene since 1999, and their products and solutions can be found in networks worldwide. SolarWinds! You hear the name and immediately think “solutions management” or big screens full of more network information than you can shake a stick at. By David Boyd in Penetration Testing, Security Testing & Analysis

Solarwinds dameware mini remote control