Description (CNA)
TeamSpeak 3.5.6 contains an insecure file permissions vulnerability that allows local attackers to replace executable files with malicious binaries. Attackers can replace system executables like ts3client_win32.exe with custom files to potentially gain SYSTEM or Administrator-level access.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TeamSpeak / TeamSpeak | affected 3.5.6 |
CWE
CWE-732
References
- https://www.exploit-db.com/exploits/50743
- https://www.teamspeak.com
- https://www.teamspeak.com/en/downloads
- https://www.vulncheck.com/advisories/teamspeak-insecure-file-permissions
ADP enrichment
No English description supplied.
No references supplied.