DameWare Remote Support & DameWare Mini Remote Control 12.2.4.11 [En]

Dameware 12.2.4 Release Notes
Release date: February 15, 2023

Dameware Remote Support includes a copy of Dameware Mini Remote Control, and at times, separate release notes may be published for each product. However, for Dameware 12.2.4 these release notes are the most recent for both products.

These release notes describe the new features, improvements, and fixed issues in Dameware 12.2.4. They also provide information about upgrades and describe workarounds for known issues.

Due to improved security standards, Dameware 12.2.4 is not compatible with agent versions earlier than Dameware 12.2. Agents must be removed and version 12.2.4 installed again through the application or re-installed via the agent installer.

For information on the latest hotfixes, see Dameware Hotfixes.
For release notes for previous Dameware versions, see Previous Version documentation.
For information about requirements, see Dameware system requirements and port requirements. Note that without a properly configured firewall, Dameware users may experience connection and performance issues.
For information about working with Dameware, see the Dameware Administrator Guide.
New features and improvements in Dameware
Return to top

Dameware 12.2.4 includes user interface updates and security improvements compared to previous releases. It also includes SQLite in place of Microsoft SQL Server Compact Edition for interactions in the Dameware Central Server.

You will be presented with the option to back up your SQL CE database during your upgrade to Dameware 12.2.4.

Fixed issues in Dameware 12.2.4

Dameware 12.2.4 fixes the following issues.

Case Number Description
N/A

A white or flickering screen in Dameware Mini Remote Control when switching to an RDP session in a minimized window is resolved by adding new registry keys as described in the following KB article: Flickering screen when connecting to an active RDP session in a minimized window while using Dameware Mini Remote Control
N/A Logon credential for all connected machines in Dameware Remote Support were stored using LSA storage, which was updated with the introduction of Microsoft Data Protection API in DRS. After upgrading to Dameware Remote Support 12.2.4, users will be prompted to back up credentials before the first DRS 12.2.4 launch.
N/A When a user has a DRS agent service 12.2.2 or earlier version, Dameware seamlessly removes the old services before prompting the user to install a new agent service.
N/A Dameware 12.2.4 fixes an incorrect export to CSV and import from DBF in DRS.
N/A An RCmd View failure in DRS on large output has been corrected.
N/A DRS is now working as expected when enumerating computers in a discovered domain.
N/A When disabling Windows Network and/or Active Directory, DRS users will no longer encounter codebase errors.
N/A There are no longer any missing digital signatures for various DLLs and EXE files in Dameware products.
CVEs
SolarWinds would like to thank our Security Researchers below for reporting on the issue in a responsible manner and working with our security, product, and engineering teams to fix the vulnerability.

Third-party CVEs
CVE-ID Vulnerability Title Description Severity Credit
CVE-2022-37434 Zlib buffer overflow
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.

Only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).