CVE-2019-18988

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2019-18988

Remediation deadline: May 3, 2022

Description

TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system).

Timeline

Published:November 3rd, 2021 12:00 AM

Last modified:November 3rd, 2021 12:00 AM

Added to KEV:November 3rd, 2021

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

TeamViewer

Products

Desktop

Weaknesses (CWE)

CWE-521

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute