CVE-2018-16550

Name of the Vulnerable Software and Affected Versions TeamViewer versions 10.x through 13.x

Description The issue allows remote attackers to bypass the brute-force authentication protection mechanism. This is achieved by skipping the "Cancel" step, making it easier to determine the correct value of the default 4-digit PIN.

Recommendations For versions 10.x through 13.x, consider temporarily restricting access to the authentication mechanism until a patch is available. As a mitigation measure, users can also change the default 4-digit PIN to a stronger password to minimize the risk of exploitation.