TeamViewer Desktop up to 14.7.1965 AES Key Configuration File improper authentication

Summaryinfo

A vulnerability was found in TeamViewer Desktop up to 14.7.1965. It has been classified as critical. The impacted element is an unknown function of the component AES Key Handler. Performing a manipulation as part of Configuration File results in improper authentication. This vulnerability is known as CVE-2019-18988. Remote exploitation of the attack is possible. Furthermore, an exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability classified as critical has been found in TeamViewer Desktop up to 14.7.1965. This affects an unknown code block of the component AES Key Handler. The manipulation as part of a Configuration File leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality. The summary by CVE is:

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the current version of the product. If an attacker were to know this key, they could decrypt protect information stored in the registry or configuration files of TeamViewer. With versions before v9.x , this allowed for attackers to decrypt the Unattended Access password to the system (which allows for remote login to the system as well as headless file browsing). The latest version still uses the same key for OptionPasswordAES but appears to have changed how the Unattended Access password is stored. While in most cases an attacker requires an existing session on a system, if the registry/configuration keys were stored off of the machine (such as in a file share or online), an attacker could then decrypt the required password to login to the system.

The weakness was published 02/07/2020. This vulnerability is uniquely identified as CVE-2019-18988 since 11/15/2019. It is possible to initiate the attack remotely. The requirement for exploitation is a authentication. Technical details are unknown but an exploit is available.

It is declared as attacked. The CISA Known Exploited Vulnerabilities Catalog lists this issue since 11/03/2021 with a due date of 05/03/2022:

Apply updates per vendor instructions.

Upgrading eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• TeamViewer

Name

• Desktop

Version

• 14.7.1965

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion