PT-2024-5918 · Teamviewer · Teamviewer Meeting+1

Christian Ritter · Published 2024-08-27 · Updated 2024-09-19 · CVE-2024-6053

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client versions prior to 15.57 TeamViewer Meeting versions prior to 15.55.3

Description The issue is related to improper access control in the clipboard synchronization feature. This can lead to unintentional sharing of the clipboard with the current presenter of a meeting, potentially allowing a remote attacker to gain unauthorized access to protected information.

Recommendations For TeamViewer Full Client versions prior to 15.57, update to version 15.57 or later to resolve the issue. For TeamViewer Meeting versions prior to 15.55.3, update to version 15.55.3 or later to resolve the issue. As a temporary workaround, consider disabling the clipboard synchronization feature until a patch is available.

Fix

Weakness Enumeration

CWE-359

Related Identifiers

BDU:2024-06724

CVE-2024-6053

Affected Products

Teamviewer Full Client

Teamviewer Meeting

References · 12

• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1007 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06724 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6053 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6053 · Vendor Advisory
• https://t.me/cvenotify/95304 · Telegram Post
• https://twitter.com/CVESource/status/1828849452515250436 · Twitter Post
• https://t.me/cvenotify/95300 · Telegram Post
• https://twitter.com/CVEnew/status/1828836204336288048 · Twitter Post
• https://t.me/cvedetector/4336 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1828873045982822894 · Twitter Post
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1007/? · Note
• https://t.me/cvenotify/92532 · Telegram Post