CVE-2018-16550
published 2018-09-05CVE-2018-16550: TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes…
PriorityP356critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
3.58%
87.9th percentile
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| teamviewer | teamviewer | 10.0.2551 – 13.2.9356 | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
VISAM VBASE Editor
cisa_ics·2021-11-09·CVSS 7.4
[HIGH] VISAM VBASE Editor
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
VISAM VBASE Editor
Last RevisedNovember 09, 2021
Alert CodeICSA-21-308-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 7.4
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: VISAM
- Equipment: VBASE
- Vulnerabilities: Improper Access Control, Cross-site Scripting, Improper Restriction of XML External Entity Reference, Using Components with Known Vulnerabilities
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities may allow un-neutralized user-controllable data input, disclosure of local files, access to NTLM (Windows New Technology LAN Manager) hashes
CISA ICS
Omron CX-Supervisor
cisa_ics·2019-11-06·CVSS 9.3
[CRITICAL] Omron CX-Supervisor
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Omron CX-Supervisor
Last RevisedNovember 06, 2019
Alert CodeICSA-19-309-01
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low skill level to exploit
- Vendor: Omron
- Equipment: CX-Supervisor
- Vulnerability: Use of Obsolete Function
## 2. RISK EVALUATION
Successful exploitation of this vulnerability could result in information disclosure, total compromise of the system, and system unavailability.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following versions of both ‘Full Development’ and ‘Runtime Only’ packages of Omron’s SCADA and HM
GHSA
GHSA-3j7w-gj98-cj27: TeamViewer 10
ghsa_unreviewed·2022-05-13
CVE-2018-16550 [CRITICAL] GHSA-3j7w-gj98-cj27: TeamViewer 10
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-09-05
Published