Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 15.83, 15.64.10 (Legacy Windows 7 & 8), 14.7.48868 (Windows), 14.7.48868 (Linux), 14.7.48868 (macOS), and 4 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The vulnerability affects TeamViewer Full Client, TeamViewer Host, and the TeamViewer Remote Management Monitoring component. A local user with low-level access on the system could exploit improper access control in their inter-process communication to run scripts with SYSTEM (Windows) or root (Linux/macOS) privileges, gaining full control of the machine.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- TeamViewer Full Client
fixed in 15.83; From 15.64.0 (Legacy Windows 7 & 8) · fixed in 15.64.10 (Legacy Windows 7 & 8); From 14.7.0 (Windows) · fixed in 14.7.48868 (Windows); From 14.7.0 (Linux) · fixed in 14.7.48868 (Linux); From 14.7.0 (macOS) · fixed in 14.7.48868 (macOS); From 13.2.0 (Windows) · fixed in 13.2.36231 (Windows); From 13.2.0 (Linux) · fixed in 13.2.154008 (Linux); From 13.2.0 (macOS) · fixed in 13.2.154007 (macOS)
- TeamViewer Host
fixed in 15.83; From 15.64.0 (Legacy Windows 7 & 8) · fixed in 15.64.10 (Legacy Windows 7 & 8); From 14.7.0 (Windows) · fixed in 14.7.48868 (Windows); From 14.7.0 (Linux) · fixed in 14.7.48868 (Linux); From 14.7.0 (macOS) · fixed in 14.7.48868 (macOS); From 13.2.0 (Windows) · fixed in 13.2.36231 (Windows); From 13.2.0 (Linux) · fixed in 13.2.154008 (Linux); From 13.2.0 (macOS) · fixed in 13.2.154007 (macOS)
- TeamViewer Remote Management - Monitoring
fixed in 26.10.1