CVE-2018-16550

TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-09-05

Last modified

2024-08-05

Affected products

• Teamviewer (Teamviewer)

References

• https://twitter.com/vah_13/status/1036894081350291457