CVE-2024-7479

Improper signature verification of VPN driver installation in TeamViewer Remote Clients

State: Published
Severity: 8.8 High
Published: Sep 25, 2024
Updated: Sep 25, 2024
Reserved: Aug 5, 2024

Description

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	TV

Weaknesses

CWE-347 Improper Verification of Cryptographic Signature

Affected Products

Product	Versions
Remote Full ClientTeamViewer	15.0.0 to before 15.58.4Affected 14.0.0 to before 14.7.48796Affected 13.0.0 to before 13.2.36225Affected 12.0.0 to before 12.0.259312Affected 11.0.0 to before 11.0.259311Affected
Remote HostTeamViewer	15.0.0 to before 15.58.4Affected 14.0.0 to before 14.7.48796Affected 13.0.0 to before 13.2.36225Affected 12.0.0 to before 12.0.259312Affected 11.0.0 to before 11.0.259311Affected

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.