PT-2024-6440 · Teamviewer · Teamviewer

Peter Gabaldon

·

Published

2024-08-05

·

Updated

2025-06-05

·

CVE-2024-7479

CVSS v3.1

8.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TeamViewer Remote Clients versions prior to 15.58.4 for Windows
Description The issue is related to improper verification of cryptographic signature during the installation of a VPN driver via the TeamViewer service.exe component. This allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers. The vulnerability is actively exploited.
Recommendations For TeamViewer Remote Clients versions prior to 15.58.4 for Windows, update to version 15.58.4 or later to resolve the issue. As a temporary workaround, consider disabling the TeamViewer service.exe component until a patch is applied. Restrict access to the TeamViewer service.exe component to minimize the risk of exploitation. Avoid using the VPN driver installation feature in TeamViewer until the issue is resolved.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2024-07525
BDU:2024-09182
CVE-2024-7479
ZDI-24-1289

Affected Products

Teamviewer