Lucene search

K
cvelistTVCVELIST:CVE-2023-0837
HistoryJun 14, 2023 - 7:01 a.m.

CVE-2023-0837

2023-06-1407:01:10
CWE-285
TV
www.cve.org
1
cve-2023-0837
teamviewer
authorization
settings
unprivileged user
local device
windows
macos
configuration

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0

Percentile

9.0%

An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged user to change basic local device settings even though the options were locked. This can result in unwanted changes to the configuration.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "MacOS"
    ],
    "product": "Remote",
    "vendor": "TeamViewer",
    "versions": [
      {
        "lessThanOrEqual": "15.42.7",
        "status": "affected",
        "version": "15.41",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2023-0837