CVE-2024-0819CWE-269

Incomplete protection of personal password settings

High · published February 27, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by changing the personal password setting and establishing a remote connection to a logged-in admin account.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-02-27T14:07Z
EPSS history
Timeline
  • 27 FEB 14:07Z
    Incomplete protection of personal password settings
    cvelistv5