CVE-2024-7479

published 2024-09-25

CVE-2024-7479: Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients…

Priority P3 46 high 8.8 CVSS 3.1

AV L AC L PR L UI N S C C H I H A H

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
teamviewer	remote_full_client	>= 11.0.0 < 11.0.259311	11.0.259311
teamviewer	remote_full_client	>= 12.0.0 < 12.0.259312	12.0.259312
teamviewer	remote_full_client	>= 13.0.0 < 13.2.36225	13.2.36225
teamviewer	remote_full_client	>= 14.0.0 < 14.7.48796	14.7.48796
teamviewer	remote_full_client	>= 15.0.0 < 15.58.4	15.58.4
teamviewer	remote_host	>= 11.0.0 < 11.0.259311	11.0.259311
teamviewer	remote_host	>= 12.0.0 < 12.0.259312	12.0.259312
teamviewer	remote_host	>= 13.0.0 < 13.2.36225	13.2.36225
teamviewer	remote_host	>= 14.0.0 < 14.7.48796	14.7.48796
teamviewer	remote_host	>= 15.0.0 < 15.58.4	15.58.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-347