CVE-2024-7479 — Improper signature verification of VPN driver installation in TeamViewer Remote Clients

Description (CNA)

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

Affected (CNA)

Vendor / product	Versions
TeamViewer / Remote Full Client	affected 15.0.0 before 15.58.4; affected 14.0.0 before 14.7.48796; affected 13.0.0 before 13.2.36225; affected 12.0.0 before 12.0.259312; affected 11.0.0 before 11.0.259311
TeamViewer / Remote Host	affected 15.0.0 before 15.58.4; affected 14.0.0 before 14.7.48796; affected 13.0.0 before 13.2.36225; affected 12.0.0 before 12.0.259312; affected 11.0.0 before 11.0.259311

CWE

CWE-347

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.