IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.0Hoch

CVE-2025-36537Incorrect Permission Assignment for Critical Resource in TeamViewer Remote Management

TeamViewer Full Client; TeamViewer Host; TeamViewer Full Client (Win7/8); TeamViewer Host (Win7/8) Veröffentlicht: (vor 1 Jahr)

Beschreibung

Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management.

Schwachstellentyp (CWE): CWE-732

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
TeamViewer Full Client 15.0.0 – < 15.67, 14.0.0 – < 14.7.48809, 13.0.0 – < 13.2.36227, 12.0.0 – < 12.0.259325, 11.0.0 – < 11.0.259324
TeamViewer Full Client (Win7/8) 15.0.0 – < 15.64.5
TeamViewer Host 15.0.0 – < 15.67, 14.0.0 – < 14.7.48809, 13.0.0 – < 13.2.36227, 12.0.0 – < 12.0.259325, 11.0.0 – < 11.0.259324
TeamViewer Host (Win7/8) 15.0.0 – < 15.64.5

Referenzen und Patches