Vulnerability-Lookup

CVE-2024-7481 (GCVE-0-2024-7481)

Vulnerability from cvelistv5 – Published: 2024-09-25 10:33 – Updated: 2024-09-25 15:16

Title

Improper signature verification of Printer driver installation in TeamViewer Remote Clients

Summary

Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-25 15:14 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

References

1 reference

URL	Tags
https://www.teamviewer.com/en/resources/trust-cen…

Impacted products

3 products

Vendor	Product	Version	CPE status
TeamViewer	Remote Full Client	Affected: 15.0.0 , < 15.58.4 (custom) Affected: 14.0.0 , < 14.7.48796 (custom) Affected: 13.0.0 , < 13.2.36225 (custom) Affected: 12.0.0 , < 12.0.259312 (custom) Affected: 11.0.0 , < 11.0.259311 (custom)	guessed
TeamViewer	Remote Host	Affected: 15.0.0 , < 15.58.4 (custom) Affected: 14.0.0 , < 14.7.48796 (custom) Affected: 13.0.0 , < 13.2.36225 (custom) Affected: 12.0.0 , < 12.0.259312 (custom) Affected: 11.0.0 , < 11.0.259311 (custom)	guessed
teamviewer	host	Affected: 15.0.0 , < 15.58.4 (custom) Affected: 14.0.0 , < 14.7.48796 (custom) Affected: 13.0.0 , < 13.2.36225 (custom) Affected: 12.0.0 , < 12.0.259312 (custom) Affected: 11.0.0 , < 11.0.259311 (custom) cpe:2.3:a:teamviewer:full_client:::::::: cpe:2.3:a:teamviewer:host::::::::

Credits

Peter Gabaldon (https://pgj11.com/) working with Trend Micro Zero Day Initiative

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:teamviewer:full_client:*:*:*:*:*:*:*:*",
              "cpe:2.3:a:teamviewer:host:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "host",
            "vendor": "teamviewer",
            "versions": [
              {
                "lessThan": "15.58.4",
                "status": "affected",
                "version": "15.0.0",
                "versionType": "custom"
              },
              {
                "lessThan": "14.7.48796",
                "status": "affected",
                "version": "14.0.0",
                "versionType": "custom"
              },
              {
                "lessThan": "13.2.36225",
                "status": "affected",
                "version": "13.0.0",
                "versionType": "custom"
              },
              {
                "lessThan": "12.0.259312",
                "status": "affected",
                "version": "12.0.0",
                "versionType": "custom"
              },
              {
                "lessThan": "11.0.259311",
                "status": "affected",
                "version": "11.0.0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-7481",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-25T15:14:22.442380Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-25T15:16:30.827Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Remote Full Client",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "15.58.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7.48796",
              "status": "affected",
              "version": "14.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "13.2.36225",
              "status": "affected",
              "version": "13.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "12.0.259312",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "11.0.259311",
              "status": "affected",
              "version": "11.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Remote Host",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "15.58.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7.48796",
              "status": "affected",
              "version": "14.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "13.2.36225",
              "status": "affected",
              "version": "13.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "12.0.259312",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "11.0.259311",
              "status": "affected",
              "version": "11.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Peter Gabaldon (https://pgj11.com/) working with Trend Micro Zero Day Initiative"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers."
            }
          ],
          "value": "Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347 Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-25T10:33:12.452Z",
        "orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
        "shortName": "TV"
      },
      "references": [
        {
          "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to the latest version."
            }
          ],
          "value": "Update to the latest version."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Improper signature verification of Printer driver installation in TeamViewer Remote Clients",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6",
    "assignerShortName": "TV",
    "cveId": "CVE-2024-7481",
    "datePublished": "2024-09-25T10:33:12.452Z",
    "dateReserved": "2024-08-05T08:46:23.334Z",
    "dateUpdated": "2024-09-25T15:16:30.827Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-7481",
      "date": "2026-09-17",
      "epss": "0.00268",
      "percentile": "0.19079"
    },
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.\"}, {\"lang\": \"es\", \"value\": \"La verificaci\\u00f3n incorrecta de la firma criptogr\\u00e1fica durante la instalaci\\u00f3n de un controlador de impresora a trav\\u00e9s del componente TeamViewer_service.exe de TeamViewer Remote Clients versi\\u00f3n anterior a 15.58.4 para Windows permite que un atacante con acceso local sin privilegios en un sistema Windows eleve sus privilegios e instale controladores.\"}]",
      "id": "CVE-2024-7481",
      "lastModified": "2024-09-26T13:32:02.803",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"psirt@teamviewer.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.0, \"impactScore\": 6.0}]}",
      "published": "2024-09-25T11:15:12.553",
      "references": "[{\"url\": \"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/\", \"source\": \"psirt@teamviewer.com\"}]",
      "sourceIdentifier": "psirt@teamviewer.com",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": "[{\"source\": \"psirt@teamviewer.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-347\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-7481\",\"sourceIdentifier\":\"psirt@teamviewer.com\",\"published\":\"2024-09-25T11:15:12.553\",\"lastModified\":\"2026-06-17T08:20:17.523\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.\"},{\"lang\":\"es\",\"value\":\"La verificaci\u00f3n incorrecta de la firma criptogr\u00e1fica durante la instalaci\u00f3n de un controlador de impresora a trav\u00e9s del componente TeamViewer_service.exe de TeamViewer Remote Clients versi\u00f3n anterior a 15.58.4 para Windows permite que un atacante con acceso local sin privilegios en un sistema Windows eleve sus privilegios e instale controladores.\"}],\"affected\":[{\"source\":\"psirt@teamviewer.com\",\"affectedData\":[{\"vendor\":\"TeamViewer\",\"product\":\"Remote Full Client\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"15.0.0\",\"lessThan\":\"15.58.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"14.0.0\",\"lessThan\":\"14.7.48796\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.2.36225\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.259312\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.0.0\",\"lessThan\":\"11.0.259311\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"TeamViewer\",\"product\":\"Remote Host\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\"],\"versions\":[{\"version\":\"15.0.0\",\"lessThan\":\"15.58.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"14.0.0\",\"lessThan\":\"14.7.48796\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.2.36225\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.259312\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.0.0\",\"lessThan\":\"11.0.259311\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"affectedData\":[{\"vendor\":\"teamviewer\",\"product\":\"host\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:a:teamviewer:full_client:*:*:*:*:*:*:*:*\",\"cpe:2.3:a:teamviewer:host:*:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"15.0.0\",\"lessThan\":\"15.58.4\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"14.0.0\",\"lessThan\":\"14.7.48796\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"13.0.0\",\"lessThan\":\"13.2.36225\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0.0\",\"lessThan\":\"12.0.259312\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.0.0\",\"lessThan\":\"11.0.259311\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@teamviewer.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.0,\"impactScore\":6.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-09-25T15:14:22.442380Z\",\"id\":\"CVE-2024-7481\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@teamviewer.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-347\"}]}],\"references\":[{\"url\":\"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/\",\"source\":\"psirt@teamviewer.com\"}]}}",
    "redhat_vex": {
      "current_release_date": "2025-05-28T21:25:47+00:00",
      "cve": "CVE-2024-7481",
      "id": "CVE-2024-7481",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Improper signature verification of Printer driver installation in TeamViewer Remote Clients",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-7481.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-7481\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-09-25T15:14:22.442380Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:teamviewer:full_client:*:*:*:*:*:*:*:*\", \"cpe:2.3:a:teamviewer:host:*:*:*:*:*:*:*:*\"], \"vendor\": \"teamviewer\", \"product\": \"host\", \"versions\": [{\"status\": \"affected\", \"version\": \"15.0.0\", \"lessThan\": \"15.58.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.0.0\", \"lessThan\": \"14.7.48796\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.2.36225\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.259312\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.0.0\", \"lessThan\": \"11.0.259311\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-09-25T15:16:18.538Z\"}}], \"cna\": {\"title\": \"Improper signature verification of Printer driver installation in TeamViewer Remote Clients\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Peter Gabaldon (https://pgj11.com/) working with Trend Micro Zero Day Initiative\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"TeamViewer\", \"product\": \"Remote Full Client\", \"versions\": [{\"status\": \"affected\", \"version\": \"15.0.0\", \"lessThan\": \"15.58.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.0.0\", \"lessThan\": \"14.7.48796\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.2.36225\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.259312\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.0.0\", \"lessThan\": \"11.0.259311\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"TeamViewer\", \"product\": \"Remote Host\", \"versions\": [{\"status\": \"affected\", \"version\": \"15.0.0\", \"lessThan\": \"15.58.4\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"14.0.0\", \"lessThan\": \"14.7.48796\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"13.0.0\", \"lessThan\": \"13.2.36225\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0.0\", \"lessThan\": \"12.0.259312\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.0.0\", \"lessThan\": \"11.0.259311\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Update to the latest version.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Update to the latest version.\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-347\", \"description\": \"CWE-347 Improper Verification of Cryptographic Signature\"}]}], \"providerMetadata\": {\"orgId\": \"13430f76-86eb-43b2-a71c-82c956ef31b6\", \"shortName\": \"TV\", \"dateUpdated\": \"2024-09-25T10:33:12.452Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-7481\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-09-25T15:16:30.827Z\", \"dateReserved\": \"2024-08-05T08:46:23.334Z\", \"assignerOrgId\": \"13430f76-86eb-43b2-a71c-82c956ef31b6\", \"datePublished\": \"2024-09-25T10:33:12.452Z\", \"assignerShortName\": \"TV\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

BDU:2024-09182 (CVE-2024-7481)

Vulnerability from fstec – Published: 2024-11-08 – Updated: 2024-11-08 – View on bdu.fstec.ru Exploit publicly available Fixed

Title

Уязвимость исполняемого файла TeamViewer_service.exe программного обеспечения для удалённого управления компьютером TeamViewer, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость исполняемого файла TeamViewer_service.exe программного обеспечения для удалённого управления компьютером TeamViewer связана с некорректной проверкой криптографической подписи. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

6.8 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:C/A:C

8.8 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Spoofing

Incidents

Being clarified

Remediation

Software update

CWE

CWE-347 - Некорректная проверка криптографической подписи

Aliases

CVE-2024-7481

References

3 references

URL
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/
https://vuldb.com/?id.278455
https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481

Impacted products

2 products from 1 vendor

Vendors

TeamViewer GmbH

Products

TeamViewer, TeamViewer Host

Versions

до 15.58.4 (TeamViewer), до 14.7.48796 (TeamViewer), до 13.2.36225 (TeamViewer), до 12.0.259312 (TeamViewer), до 11.0.259311 (TeamViewer), до 15.58.4 (TeamViewer Host), до 14.7.48796 (TeamViewer Host), до 3.2.36225 (TeamViewer Host), до 12.0.259312 (TeamViewer Host), до 11.0.259311 (TeamViewer Host)

Product types

Application software

Platforms

Microsoft Corp Windows -

Mitigations

Использование рекомендаций производителя: https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "TeamViewer GmbH",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 15.58.4 (TeamViewer), \u0434\u043e 14.7.48796 (TeamViewer), \u0434\u043e 13.2.36225 (TeamViewer), \u0434\u043e 12.0.259312 (TeamViewer), \u0434\u043e 11.0.259311 (TeamViewer), \u0434\u043e 15.58.4 (TeamViewer Host), \u0434\u043e 14.7.48796 (TeamViewer Host), \u0434\u043e 3.2.36225 (TeamViewer Host), \u0434\u043e 12.0.259312 (TeamViewer Host), \u0434\u043e 11.0.259311 (TeamViewer Host)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "05.08.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "08.11.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "08.11.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-09182",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-7481",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "TeamViewer, TeamViewer Host",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows - ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 TeamViewer_service.exe \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c TeamViewer, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (CWE-347)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 TeamViewer_service.exe \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c TeamViewer \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/\nhttps://vuldb.com/?id.278455\nhttps://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-347",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8)"
}

FKIE_CVE-2024-7481

Vulnerability from fkie_nvd - Published: 2024-09-25 11:15 - Updated: 2026-06-17 08:20

Severity

8.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Summary

References

	URL	Tags
	psirt@teamviewer.com	https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Remote Full Client",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "15.58.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7.48796",
              "status": "affected",
              "version": "14.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "13.2.36225",
              "status": "affected",
              "version": "13.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "12.0.259312",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "11.0.259311",
              "status": "affected",
              "version": "11.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "Remote Host",
          "vendor": "TeamViewer",
          "versions": [
            {
              "lessThan": "15.58.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7.48796",
              "status": "affected",
              "version": "14.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "13.2.36225",
              "status": "affected",
              "version": "13.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "12.0.259312",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "11.0.259311",
              "status": "affected",
              "version": "11.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "psirt@teamviewer.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:teamviewer:full_client:*:*:*:*:*:*:*:*",
            "cpe:2.3:a:teamviewer:host:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "host",
          "vendor": "teamviewer",
          "versions": [
            {
              "lessThan": "15.58.4",
              "status": "affected",
              "version": "15.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "14.7.48796",
              "status": "affected",
              "version": "14.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "13.2.36225",
              "status": "affected",
              "version": "13.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "12.0.259312",
              "status": "affected",
              "version": "12.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "11.0.259311",
              "status": "affected",
              "version": "11.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers."
    },
    {
      "lang": "es",
      "value": "La verificaci\u00f3n incorrecta de la firma criptogr\u00e1fica durante la instalaci\u00f3n de un controlador de impresora a trav\u00e9s del componente TeamViewer_service.exe de TeamViewer Remote Clients versi\u00f3n anterior a 15.58.4 para Windows permite que un atacante con acceso local sin privilegios en un sistema Windows eleve sus privilegios e instale controladores."
    }
  ],
  "id": "CVE-2024-7481",
  "lastModified": "2026-06-17T08:20:17.523",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 6.0,
        "source": "psirt@teamviewer.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-7481",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-09-25T15:14:22.442380Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-09-25T11:15:12.553",
  "references": [
    {
      "source": "psirt@teamviewer.com",
      "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006/"
    }
  ],
  "sourceIdentifier": "psirt@teamviewer.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-347"
        }
      ],
      "source": "psirt@teamviewer.com",
      "type": "Secondary"
    }
  ]
}

GHSA-4P9J-M37V-X8J7

Vulnerability from github – Published: 2024-09-25 12:30 – Updated: 2024-09-25 12:30

Details

Severity

8.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-7481"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-347"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-09-25T11:15:12Z",
    "severity": "HIGH"
  },
  "details": "Improper verification of cryptographic signature during installation of a Printer driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.",
  "id": "GHSA-4p9j-m37v-x8j7",
  "modified": "2024-09-25T12:30:40Z",
  "published": "2024-09-25T12:30:40Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7481"
    },
    {
      "type": "WEB",
      "url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1006"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

WID-SEC-W-2024-2222

Vulnerability from csaf_certbund - Published: 2024-09-25 22:00 - Updated: 2024-10-07 22:00

Summary

TeamViewer: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Severity

Hoch

Scope

2 vulnerabilities in this advisory, including CVE-2024-7481.

CVE-2024-7481

In TeamViewer bestehen mehrere Schwachstellen. Diese Fehler existieren wegen einer unsachgemäßen Überprüfung der kryptographischen Signatur während der Installation eines Printer-Treibers. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erhöhen und Treiber zu installieren.

Known affected: 1 product

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-7481 (GCVE-0-2024-7481)

BDU:2024-09182 (CVE-2024-7481)

FKIE_CVE-2024-7481

GHSA-4P9J-M37V-X8J7

WID-SEC-W-2024-2222

Tags

Sightings

Nomenclature

Related by attack behaviour