Vendor / Project: TeamViewer Product: Desktop Description: TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system). Required Action: Apply updates per vendor instructions. Due Date: 2022-05-03 Ransomware Campaign Use: Unknown CWEs: CWE-521 Notes: https://nvd.nist.gov/vuln/detail/CVE-2019-18988
CVE-2019-18988 — TeamViewer Desktop Bypass Remote Login Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2021-11-03 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 7.0
- Quelle-ID:
cisa_kev - uid_hash:
fd586fe315e22ab2ba623204948772d73b3be27fd0ff6c0343959095a73cd886
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7 |
HIGH |
7 |
2020-02-07 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |