Description (CNA)
An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. This may result in unauthorized actions and potentially lead to remote code execution on the target system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TeamViewer / Full Client | affected 15.0 before 15.82; affected 15.64.0 (Legacy Windows 7 & 8) before 15.64.8 (Legacy Windows 7 & 8); affected 14.7.0 (Windows) before 14.7.48855 (Windows); affected 13.2.0 (Windows) before 13.2.36230 (Windows); affected 14.7.0 (Linux) before 14.7.48855 (Linux); affected 13.2.0 (Linux) before 13.2.153995 (Linux); affected 14.7.0 (MacOS) before 14.7.48855 (MacOS); affected 13.2.0 (MacOS) before 13.2.153994 (MacOS) |
| TeamViewer / Host | affected 15.0 before 15.82; affected 15.64.0 (Legacy Windows 7 & 8) before 15.64.8 (Legacy Windows 7 & 8); affected 14.7.0 (Windows) before 14.7.48855 (Windows); affected 13.2.0 (Windows) before 13.2.36230 (Windows); affected 14.7.0 (Linux) before 14.7.48855 (Linux); affected 13.2.0 (Linux) before 13.2.153995 (Linux); affected 14.7.0 (MacOS) before 14.7.48855 (MacOS); affected 13.2.0 (MacOS) before 13.2.153994 (MacOS) |
CWE
CWE-284
References
ADP enrichment
No English description supplied.
No references supplied.