Vulnerability · Published Apr 7, 2020 · Assigned by tenable
CVE-2020-5734
High 7.5
In plain English
A high-severity security flaw in SolarWinds Dameware. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 25.1% (higher than 98% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)25.1%top 2.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key exchange.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | SolarWinds Dameware | 12.1 Hotfix 3 |
References
- https://www.tenable.com/security/research/tra-2020-19 x_refsource_MISC