Vulnerability · Published Sep 25, 2024 · Assigned by TV
CVE-2024-7481Improper signature verification of Printer driver installation in TeamViewer Remote Clients
High 8.8
In plain English
A high-severity security flaw in Remote Full Client from TeamViewer. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Official description
Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| TeamViewer | Remote Full Client | 15.0.0 – before 15.58.414.0.0 – before 14.7.4879613.0.0 – before 13.2.3622512.0.0 – before 12.0.25931211.0.0 – before 11.0.259311 |
| TeamViewer | Remote Host | 15.0.0 – before 15.58.414.0.0 – before 14.7.4879613.0.0 – before 13.2.3622512.0.0 – before 12.0.25931211.0.0 – before 11.0.259311 |
Weakness: CWE-347 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H