An improper access control vulnerability in
the IPC communication between TeamViewer Full Client or Host prior to version
15.83 and the Remote Management Monitoring component prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute scripts as
SYSTEM/root.
CVSS
7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
before 15.83; from 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8); from 14.7.0 (Windows) before 14.7.48868 (Windows); from 14.7.0 (Linux) before 14.7.48868 (Linux); from 14.7.0 (macOS) before 14.7.48868 (macOS); from 13.2.0 (Windows) before 13.2.36231 (Windows); from 13.2.0 (Linux) before 13.2.154008 (Linux); from 13.2.0 (macOS) before 13.2.154007 (macOS)
before 15.83; from 15.64.0 (Legacy Windows 7 & 8) before 15.64.10 (Legacy Windows 7 & 8); from 14.7.0 (Windows) before 14.7.48868 (Windows); from 14.7.0 (Linux) before 14.7.48868 (Linux); from 14.7.0 (macOS) before 14.7.48868 (macOS); from 13.2.0 (Windows) before 13.2.36231 (Windows); from 13.2.0 (Linux) before 13.2.154008 (Linux); from 13.2.0 (macOS) before 13.2.154007 (macOS)
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.