CVE-2015-8220
highpriority · track · 32EPSS 0.048 · 92 %ileEUUSEPSS · scored 2026-10-28
Stack-based buffer overflow in the URI handler in DWRCC.exe in SolarWinds DameWare Mini Remote Control before 12.0 HotFix 1 allows remote attackers to execute arbitrary code via a crafted commandline argument in a link.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.4–7.5
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
- solarwinds dameware mini remote control≤ 12.0nvdUScpe:2.3:a:solarwinds:dameware_mini_remote_control:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- http://www.zerodayinitiative.com/advisories/ZDI-15-555cnnvd
- https://thwack.solarwinds.com/message/308973cnnvd
- http://www.zerodayinitiative.com/advisories/ZDI-15-555enisa_euvd
- https://thwack.solarwinds.com/message/308973enisa_euvd
- http://www.zerodayinitiative.com/advisories/ZDI-15-555nvd
- https://thwack.solarwinds.com/message/308973PatchVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan