ZDI-25-320: SolarWinds DameWare Mini Remote Control Service Incorrect Permissions Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds DameWare Mini Remote Control Service. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-26396.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-320?
The severity of ZDI-25-320 is classified as high due to its potential for privilege escalation on affected systems.
How do I fix ZDI-25-320?
To fix ZDI-25-320, ensure that you apply the latest security patches provided by SolarWinds for DameWare Mini Remote Control Service.
Who is impacted by ZDI-25-320?
Users of the SolarWinds DameWare Mini Remote Control Service are impacted by vulnerability ZDI-25-320.
What type of attackers can exploit ZDI-25-320?
Local attackers with the ability to execute low-privileged code can exploit ZDI-25-320.
What does ZDI-25-320 allow an attacker to do?
ZDI-25-320 allows an attacker to escalate privileges on the affected installations of SolarWinds DameWare Mini Remote Control Service.