TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN.
References
Link | Resource |
---|---|
https://twitter.com/vah_13/status/1036894081350291457 | Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2018-09-05T22:00:00
Updated: 2018-09-05T21:57:01
Reserved: 2018-09-05T00:00:00
Link: CVE-2018-16550
JSON object: View
NVD Information
Status : Analyzed
Published: 2018-09-05T22:29:00.273
Modified: 2019-10-03T00:03:26.223
Link: CVE-2018-16550
JSON object: View
Redhat Information
No data.
CWE