CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-02-07
TeamViewer Hardcoded Shared AES Key Credential Decryption and Privilege Escalation Vulnerability (CVE-2019-18988)
[Affected Scope] TeamViewer Desktop versions v7.0.43148 through v14.7.1965.
[Impact] Attackers can decrypt stored OptionsPasswordAES and Unattended Access passwords using a globally shared, hardcoded AES key, leading to unauthorized remote login and full system takeover.
[Mitigation] Immediately uninstall affected legacy versions and upgrade to the latest secure TeamViewer release.