CVE-2024-7479

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

Score

CVSS 3.1 8.8 High

Status

Deferred - psirt@teamviewer.com

Published

2024-09-25

Last modified

2024-09-25

Weaknesses

CWE-347

Affected products

• Full Client (Teamviewer)
• Host (Teamviewer)
• Remote Full Client (Teamviewer)
• Remote Host (Teamviewer)

References

• https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/