Published: 23/03/2022 Updated: 29/03/2022

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 4.2 | Impact Score: 3.6 | Exploitability Score: 0.6

VMScore: 170

Vector: AV:L/AC:M/Au:N/C:N/I:P/A:N

TeamViewer Linux versions prior to 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password.

Vulnerable Product	Search on Vulmon	Subscribe to Product
teamviewer teamviewer

My personal readme profile.

Hi , I'm WildZarek Cybersecurity Analyst | Pentester | CTF Player | Red Team 🔴 🐺 Abou

Vulnerability scanning without agents

Authenticated Vulnerability Scanning Without Agents Maintainer: Vincent Zhen (vincentzhen@mongodbcom) Summary Authenticated vulnerability scanning is traditionally done using dedicated vulnerability scanning agents (eg, Tenable, Nessus, OpenVAS, NeXpose, Qualys, etc) These agents provide a good deal of accuracy because the software sits on the actual scan target(s) and

CWE-404 https://www.teamviewer.com/en/trust-center/security-bulletins/TV-2022-1001/https://nvd.nist.gov https://github.com/WildZarek/WildZarek

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-23242

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect