PT-2019-12488 · Teamviewer · Teamviewer

Published 2019-09-11 · Updated 2019-09-13 · CVE-2019-11769

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer version 14.2.2558

Description A local attacker can exploit an issue in the product to obtain administrative credentials and elevate privileges. This occurs because the product requires administrative credentials to be entered into the GUI when updating as a non-administrative user. These credentials are then processed in cleartext within the process memory of Teamviewer.exe, allowing any application running in the same non-administrative user context to intercept them. The vulnerability can be exploited by injecting code into Teamviewer.exe to intercept calls to GetWindowTextW and log the processed credentials.

Recommendations For TeamViewer version 14.2.2558, update the product to a newer version that addresses this issue. As a temporary workaround, consider running the update process in an administrative context to minimize the risk of credential interception. Restrict access to the Teamviewer.exe process to prevent code injection and minimize the risk of exploitation.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2019-11769

Affected Products

Teamviewer

References · 4

• https://osv.dev/vulnerability/CVE-2019-11769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11769 · Security Note
• https://blog.to.com/advisory-teamviewer-cve-2019-11769-2 · Note
• https://community.teamviewer.com/t5/Knowledge-Base/tkb-p/Knowledgebase?type=label&labels=Security · Note