Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewer_service.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install drivers.
No PoCs from references.
- https://github.com/GhostTroops/TOP
- https://github.com/Hatcat123/my_stars
- https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481
- https://github.com/fortra/CVE-2024-7479
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/plzheheplztrying/cve_monitor