IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.0Alta

CVE-2025-36537Incorrect Permission Assignment for Critical Resource in TeamViewer Remote Management

TeamViewer Full Client; TeamViewer Host; TeamViewer Full Client (Win7/8); TeamViewer Host (Win7/8) Publicada: (hace 1 año)

Descripción

Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management.

Debilidad (CWE): CWE-732

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
TeamViewer Full Client 15.0.0 – < 15.67, 14.0.0 – < 14.7.48809, 13.0.0 – < 13.2.36227, 12.0.0 – < 12.0.259325, 11.0.0 – < 11.0.259324
TeamViewer Full Client (Win7/8) 15.0.0 – < 15.64.5
TeamViewer Host 15.0.0 – < 15.67, 14.0.0 – < 14.7.48809, 13.0.0 – < 13.2.36227, 12.0.0 – < 12.0.259325, 11.0.0 – < 11.0.259324
TeamViewer Host (Win7/8) 15.0.0 – < 15.64.5

Referencias y parches