PT-2024-2709 · Teamviewer · Teamviewer

Published 2024-03-26 · Updated 2024-03-27 · CVE-2024-1933

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer versions prior to 15.52 for macOS

Description The issue is related to insecure UNIX symbolic link following in the TeamViewer Remote Client, allowing an attacker with unprivileged access to potentially elevate privileges or conduct a denial-of-service attack by overwriting the symlink. This is due to errors in handling links.

Recommendations For versions prior to 15.52, update to version 15.52 or later to resolve the issue. As a temporary workaround, consider restricting access to the TeamViewer Remote Client until the update is applied.

Fix

Weakness Enumeration

CWE-61

Related Identifiers

BDU:2024-02822

CVE-2024-1933

Affected Products

Teamviewer

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2024-1933 · Security Note
• https://bdu.fstec.ru/vul/2024-02822 · Security Note
• https://t.me/cvenotify/74718 · Telegram Post
• https://twitter.com/CVEnew/status/1772613641747018141 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1772685862758682866 · Twitter Post
• https://twitter.com/pravin_karthik/status/1773004138227380415 · Twitter Post
• https://twitter.com/hdH4dg8/status/1772796979518837202 · Twitter Post
• https://teamviewer.com/de/resources/trust-center/security-bulletins/tv-2024-1002 · Note
• https://twitter.com/iSandipd/status/1772785158950649986 · Twitter Post
• https://t.me/pentestingnews/45171 · Telegram Post
• https://twitter.com/Dinosn/status/1772710463035290064 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1772632145829228893 · Twitter Post