CVE-2019-18988

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the...

TeamViewer Multiple Vulnerabilities (CVE-2019-18988) - Linux

TeamViewer is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

TeamViewer Multiple Vulnerabilities (CVE-2019-18988) - Mac OS X

TeamViewer is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

TeamViewer Multiple Vulnerabilities (CVE-2019-18988) - Windows

TeamViewer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teamviewer:teamviewer";...

DecryptTeamViewer - Enumerate And Decrypt TeamViewer Credentials From Windows Registry

Uses CVE-2019-18988 to enumerate and decrypt TeamViewer credentials from Windows registry. Blogpost detailing the vulnerability: https://whynotsecurity.com/blog/teamviewer/ Usage .\DecryptTeamViewer.exe Download DecryptTeamViewer...

CVE-2019-18988

creationtimestamp| type| source ---|---|--- 2020-02-07 15:33:38+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/teamviewerpasswords.rb 2020-02-21 03:55:25+00:00| exploited| https://t.me/informationsecuritychannel/35219 2021-11-08...

CVE-2019-18988

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the...

CVE-2019-18988

CVE-2019-18988 affects TeamViewer Desktop up to 14.7.1965, where a single AES key was reused across different customer installations (used for OptionsPasswordAES). This allows an attacker who gains the key to decrypt protected data stored in registry/configuration files, potentially revealing the...

CVE-2019-18988

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers’ installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the...