IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.0Yüksek

CVE-2025-36537Incorrect Permission Assignment for Critical Resource in TeamViewer Remote Management

TeamViewer Full Client; TeamViewer Host; TeamViewer Full Client (Win7/8); TeamViewer Host (Win7/8) Yayım: (1 yıl önce)

Açıklama

Incorrect Permission Assignment for Critical Resource in the TeamViewer Client (Full and Host) of TeamViewer Remote and Tensor prior Version 15.67 on Windows allows a local unprivileged user to trigger arbitrary file deletion with SYSTEM privileges via leveraging the MSI rollback mechanism. The vulnerability only applies to the Remote Management features: Backup, Monitoring, and Patch Management.

Zayıflık türü (CWE): CWE-732

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
TeamViewer Full Client 15.0.0 – < 15.67, 14.0.0 – < 14.7.48809, 13.0.0 – < 13.2.36227, 12.0.0 – < 12.0.259325, 11.0.0 – < 11.0.259324
TeamViewer Full Client (Win7/8) 15.0.0 – < 15.64.5
TeamViewer Host 15.0.0 – < 15.67, 14.0.0 – < 14.7.48809, 13.0.0 – < 13.2.36227, 12.0.0 – < 12.0.259325, 11.0.0 – < 11.0.259324
TeamViewer Host (Win7/8) 15.0.0 – < 15.64.5

Kaynaklar ve yamalar