Skip to content
OpenAdvisories
High · 8.8 Public exploit CVE-2024-7479 EUVD-2024-48397GHSA-p25c-r659-95hm

Improper signature verification of VPN driver installation in TeamViewer Remote Clients

Published Sep 25, 2024 · Updated Sep 25, 2024 · Assigned by TV

Vendor: TeamViewer Product: Remote Full Client Product: Remote Host

Description

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

Affected products

VendorProductAffectedFixed
TeamViewer Remote Full Client 15.0.0 – < 15.58.4, 14.0.0 – < 14.7.48796, 13.0.0 – < 13.2.36225, 12.0.0 – < 12.0.259312, 11.0.0 – < 11.0.259311 15.58.4
TeamViewer Remote Host 15.0.0 – < 15.58.4, 14.0.0 – < 14.7.48796, 13.0.0 – < 13.2.36225, 12.0.0 – < 12.0.259312, 11.0.0 – < 11.0.259311 15.58.4

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 2 repositories

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References