Vulnerability · Published Mar 23, 2022 · Assigned by TV
CVE-2022-23242TeamViewer Linux - Deletion command not properly executed after process crash
Medium 6.3
In plain English
A medium-severity security flaw in TeamViewer for Linux from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.2%top 88.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | TeamViewer for Linux | 15.27 – through 15.27 |