Skip to content
OpenAdvisories
High WID-SEC-2024-2222 2 CVEs

TeamViewer: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Sep 25, 2024 · Updated Oct 7, 2024 · Revision 2 · de-DE

Vendor: TeamViewer Product: TeamViewer Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in TeamViewer ausnutzen, um seine Privilegien zu erhöhen.

Product

TeamViewer ist eine Fernzugriffs- und Fernsteuerungssoftware, die die Wartung von Computern und anderen Geräten ermöglicht.

Vulnerabilities 2

  • High 8.8
    CVE-2024-7479 Public exploit

    Improper signature verification of VPN driver installation in TeamViewer Remote Clients

    Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system …

    TeamViewer Remote Full Client Remote Host
  • High 8.8
    CVE-2024-7481

    Improper signature verification of Printer driver installation in TeamViewer Remote Clients

    Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows sys…

    TeamViewer Remote Full Client Remote Host

Revision history

  1. #2

    PoC aufgenommen

  2. #1

    Initiale Fassung

References