CVE-2018-14333

TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, which might make it easier for attackers to obtain sensitive information by leveraging an unattended workstation on which TeamViewer has disconnected but remains running.

Score

CVSS 3.0 8.1 High

Status

Modified - cve@mitre.org

Published

2018-07-17

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Teamviewer (Teamviewer)

References

• https://github.com/vah13/extractTVpasswords