H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2019-18988

TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system).

Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system).

Labels

exploitedkev

CISA KEV context

Vendor / productTeamViewer Desktop
Added2021-11-03
Due date2022-05-03
10 recorded

Relationships

mitigates
from Remediate CVE-2019-18988
Mitigation
related-to
to Brute Force
Technique
related-to
to Dictionary-based Password Attack
Technique
related-to
to Kerberoasting
Technique
related-to
to Password Brute Forcing
Technique
related-to
to Password Spraying
Technique
related-to
to Rainbow Table Password Cracking
Technique
related-to
to Remote Services with Stolen Credentials
Technique
related-to
to Try Common or Default Usernames and Passwords
Technique
related-to
to Windows Admin Shares with Stolen Credentials
Technique
2 external

References

nvd
CVE-2019-18988
open
cwe
CWE-521
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance