Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-7479

Improper signature verification of VPN driver installation in TeamViewer Remote Clients

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer Remote Full Client

Default version status: unaffected

  • 15.0.0 to < 15.58.4affected
  • 14.0.0 to < 14.7.48796affected
  • 13.0.0 to < 13.2.36225affected
  • 12.0.0 to < 12.0.259312affected
  • 11.0.0 to < 11.0.259311affected

TeamViewer Remote Host

Default version status: unaffected

  • 15.0.0 to < 15.58.4affected
  • 14.0.0 to < 14.7.48796affected
  • 13.0.0 to < 13.2.36225affected
  • 12.0.0 to < 12.0.259312affected
  • 11.0.0 to < 11.0.259311affected

References