Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during…
Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can place a crafted installer options file that is processed by the Advanced Asset Management installer during service activation.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- TeamViewer
- Product
- Full Client, Host
- CVSS v3.1
- 7.3 AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.002 (p9)
- Weakness
- CWE-269
- Exposure class
- Remote access
- NVD status
- Received
Why it ranks 24 (Routine)
- CVSS v3.1 7.3 high
- Exposed product class: remote access
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.