PT-2024-2709 · Teamviewer · Teamviewer

CVE-2024-1933

·

Published

2024-03-26

·

Updated

2024-03-27

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions TeamViewer versions prior to 15.52 for macOS
Description The issue is related to insecure UNIX symbolic link following in the TeamViewer Remote Client, allowing an attacker with unprivileged access to potentially elevate privileges or conduct a denial-of-service attack by overwriting the symlink. This is due to errors in handling links.
Recommendations For versions prior to 15.52, update to version 15.52 or later to resolve the issue. As a temporary workaround, consider restricting access to the TeamViewer Remote Client until the update is applied.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-02822
CVE-2024-1933

Affected Products

Teamviewer