PT-2022-2059 · Teamviewer · Teamviewer

Weaponshotgun + 1 · Published 2022-01-14 · Updated 2022-03-29 · CVE-2022-23242

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer Linux versions prior to 15.28

Description The issue is related to improper execution of a deletion command for the connection password in case of a process crash. An attacker could establish a remote connection by reusing the not properly deleted connection password if they have knowledge of the crash event, the TeamViewer ID, and either possession of the pre-crash connection password or local authenticated access to the machine. The vulnerability is also associated with resource release errors, which could allow an attacker to elevate their privileges.

Recommendations For TeamViewer Linux versions prior to 15.28, update to version 15.28 or later to resolve the issue. As a temporary workaround, consider restricting local authenticated access to the machine and ensuring that connection passwords are securely managed to minimize the risk of exploitation.

Fix

Improper Access Control

Improper Resource Release

Weakness Enumeration

CWE-284

CWE-404

Related Identifiers

BDU:2022-01724

CVE-2022-23242

Affected Products

Teamviewer

References · 6

• https://teamviewer.com/en/trust-center/security-bulletins/TV-2022-1001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23242 · Security Note
• https://bdu.fstec.ru/vul/2022-01724 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23242 · Vendor Advisory
• https://vuldb.com/?id.195729 · Note
• https://t.me/cibsecurity/39427 · Telegram Post