PT-2019-15299 · Teamviewer+1 · Teamviewer+1

Michael Deplante · Published 2019-11-25 · Updated 2019-12-11 · CVE-2019-18251

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Omron CX-Supervisor versions 3.5 (12) and prior

Description The issue is related to an obsolete function vulnerability in Teamviewer Version 5.0.8703 QS, which is shipped with Omron CX-Supervisor. This vulnerability requires user interaction to exploit.

Recommendations For Omron CX-Supervisor versions 3.5 (12) and prior, consider disabling the Teamviewer component until a patch or updated version of Teamviewer is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-477

Related Identifiers

CVE-2019-18251

ZDI-19-997

Affected Products

Omron Cx-Supervisor

Teamviewer

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-18251 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-19-997 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-318-04 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18251 · Note