CVE-2024-7479

Improper signature verification of VPN driver installation in TeamViewer Remote Clients

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.

Affected

TeamViewer · Remote Full Client · Remote Host

CVSS v3.1 TEAMVIEWER

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.41% chance of exploitation in the next 30 days, 34th percentile

Published

2024-09-25

Proof-of-concept exploits (2)

• PeterGabaldon/CVE-2024-7479_CVE-2024-7481136★ · 2024-12-22
• fortra/CVE-2024-74798★ · 2025-03-27

References

• CVE Record
• NVD entry

Related

• CVE-2024-1346
• CVE-2024-7481
• CVE-2025-40677
• CVE-2022-30136
• CVE-2022-37969
• CVE-2023-28252