CVE-2024-7479 - Vulnerability Details - OpenCVE

ReportizFlow

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Teamviewer	Full Client Host

No data.

No data.

References

Link	Providers
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/

History

Wed, 25 Sep 2024 16:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Teamviewer Teamviewer full Client Teamviewer host
CPEs		cpe:2.3:a:teamviewer:full_client:::::::: cpe:2.3:a:teamviewer:host::::::::
Vendors & Products		Teamviewer Teamviewer full Client Teamviewer host
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 25 Sep 2024 10:45:00 +0000

Type	Values Removed	Values Added
Description		Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.
Title		Improper signature verification of VPN driver installation in TeamViewer Remote Clients
Weaknesses		CWE-347
References		https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: TV

Published: 2024-09-25T10:34:08.097Z

Updated: 2024-09-25T15:13:29.437Z

Reserved: 2024-08-05T08:31:27.175Z

Link: CVE-2024-7479

Vulnrichment

Updated: 2024-09-25T15:13:20.057Z

NVD

Status : Awaiting Analysis

Published: 2024-09-25T11:15:12.330

Modified: 2024-09-26T13:32:02.803

Link: CVE-2024-7479

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-7479", "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "state": "PUBLISHED", "assignerShortName": "TV", "dateReserved": "2024-08-05T08:31:27.175Z", "datePublished": "2024-09-25T10:34:08.097Z", "dateUpdated": "2024-09-25T15:13:29.437Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Remote Full Client", "vendor": "TeamViewer", "versions": [{"lessThan": "15.58.4", "status": "affected", "version": "15.0.0", "versionType": "custom"}, {"lessThan": "14.7.48796", "status": "affected", "version": "14.0.0", "versionType": "custom"}, {"lessThan": "13.2.36225", "status": "affected", "version": "13.0.0", "versionType": "custom"}, {"lessThan": "12.0.259312", "status": "affected", "version": "12.0.0", "versionType": "custom"}, {"lessThan": "11.0.259311", "status": "affected", "version": "11.0.0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Remote Host", "vendor": "TeamViewer", "versions": [{"lessThan": "15.58.4", "status": "affected", "version": "15.0.0", "versionType": "custom"}, {"lessThan": "14.7.48796", "status": "affected", "version": "14.0.0", "versionType": "custom"}, {"lessThan": "13.2.36225", "status": "affected", "version": "13.0.0", "versionType": "custom"}, {"lessThan": "12.0.259312", "status": "affected", "version": "12.0.0", "versionType": "custom"}, {"lessThan": "11.0.259311", "status": "affected", "version": "11.0.0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Peter Gabaldon (https://pgj11.com/) working with Trend Micro Zero Day Initiative"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers."}], "value": "Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-347", "description": "CWE-347 Improper Verification of Cryptographic Signature", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "shortName": "TV", "dateUpdated": "2024-09-25T10:34:08.097Z"}, "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update to the latest version."}], "value": "Update to the latest version."}], "source": {"discovery": "UNKNOWN"}, "title": "Improper signature verification of VPN driver installation in TeamViewer Remote Clients", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "teamviewer", "product": "full_client", "cpes": ["cpe:2.3:a:teamviewer:full_client:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "15.0.0", "status": "affected", "lessThan": "15.58.4", "versionType": "custom"}, {"version": "14.0.0", "status": "affected", "lessThan": "14.7.48796", "versionType": "custom"}, {"version": "13.0.0", "status": "affected", "lessThan": "13.2.36225", "versionType": "custom"}, {"version": "12.0.0", "status": "affected", "lessThan": "12.0.259312", "versionType": "custom"}, {"version": "11.0.0", "status": "affected", "lessThan": "11.0.259311", "versionType": "custom"}]}, {"vendor": "teamviewer", "product": "host", "cpes": ["cpe:2.3:a:teamviewer:host:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "15.0.0", "status": "affected", "lessThan": "15.58.4", "versionType": "custom"}, {"version": "14.0.0", "status": "affected", "lessThan": "14.7.48796", "versionType": "custom"}, {"version": "13.0.0", "status": "affected", "lessThan": "13.2.36225", "versionType": "custom"}, {"version": "12.0.0", "status": "affected", "lessThan": "12.0.259312", "versionType": "custom"}, {"version": "11.0.0", "status": "affected", "lessThan": "11.0.259311", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-25T14:33:06.003202Z", "id": "CVE-2024-7479", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-25T15:13:29.437Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-7479", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-25T14:33:06.003202Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:teamviewer:full_client:*:*:*:*:*:*:*:*"], "vendor": "teamviewer", "product": "full_client", "versions": [{"status": "affected", "version": "15.0.0", "lessThan": "15.58.4", "versionType": "custom"}, {"status": "affected", "version": "14.0.0", "lessThan": "14.7.48796", "versionType": "custom"}, {"status": "affected", "version": "13.0.0", "lessThan": "13.2.36225", "versionType": "custom"}, {"status": "affected", "version": "12.0.0", "lessThan": "12.0.259312", "versionType": "custom"}, {"status": "affected", "version": "11.0.0", "lessThan": "11.0.259311", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:teamviewer:host:*:*:*:*:*:*:*:*"], "vendor": "teamviewer", "product": "host", "versions": [{"status": "affected", "version": "15.0.0", "lessThan": "15.58.4", "versionType": "custom"}, {"status": "affected", "version": "14.0.0", "lessThan": "14.7.48796", "versionType": "custom"}, {"status": "affected", "version": "13.0.0", "lessThan": "13.2.36225", "versionType": "custom"}, {"status": "affected", "version": "12.0.0", "lessThan": "12.0.259312", "versionType": "custom"}, {"status": "affected", "version": "11.0.0", "lessThan": "11.0.259311", "versionType": "custom"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-25T15:13:20.057Z"}}], "cna": {"title": "Improper signature verification of VPN driver installation in TeamViewer Remote Clients", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Peter Gabaldon (https://pgj11.com/) working with Trend Micro Zero Day Initiative"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "TeamViewer", "product": "Remote Full Client", "versions": [{"status": "affected", "version": "15.0.0", "lessThan": "15.58.4", "versionType": "custom"}, {"status": "affected", "version": "14.0.0", "lessThan": "14.7.48796", "versionType": "custom"}, {"status": "affected", "version": "13.0.0", "lessThan": "13.2.36225", "versionType": "custom"}, {"status": "affected", "version": "12.0.0", "lessThan": "12.0.259312", "versionType": "custom"}, {"status": "affected", "version": "11.0.0", "lessThan": "11.0.259311", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}, {"vendor": "TeamViewer", "product": "Remote Host", "versions": [{"status": "affected", "version": "15.0.0", "lessThan": "15.58.4", "versionType": "custom"}, {"status": "affected", "version": "14.0.0", "lessThan": "14.7.48796", "versionType": "custom"}, {"status": "affected", "version": "13.0.0", "lessThan": "13.2.36225", "versionType": "custom"}, {"status": "affected", "version": "12.0.0", "lessThan": "12.0.259312", "versionType": "custom"}, {"status": "affected", "version": "11.0.0", "lessThan": "11.0.259311", "versionType": "custom"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update to the latest version.", "supportingMedia": [{"type": "text/html", "value": "Update to the latest version.", "base64": false}]}], "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.", "supportingMedia": [{"type": "text/html", "value": "Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-347", "description": "CWE-347 Improper Verification of Cryptographic Signature"}]}], "providerMetadata": {"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "shortName": "TV", "dateUpdated": "2024-09-25T10:34:08.097Z"}}}, "cveMetadata": {"cveId": "CVE-2024-7479", "state": "PUBLISHED", "dateUpdated": "2024-09-25T15:13:29.437Z", "dateReserved": "2024-08-05T08:31:27.175Z", "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "datePublished": "2024-09-25T10:34:08.097Z", "assignerShortName": "TV"}, "dataVersion": "5.1"}