TeamViewer has released a security update to fix a critical vulnerability that could allow attackers to take control of other machines during an active session. The vulnerability affects the Windows, macOS, and Linux versions of the program.
The vulnerability came to light earlier this week when a Reddit user warned about the existence of the dangerous vulnerability, publishing a corresponding PoC.
[su_spacer size=”10″]
“Gellin” demonstrated that a vulnerability in Teamviewer could allow the client (the user sharing their desktop session) to gain access to the viewer’s computer without their permission. The researcher confirmed the existence of the critical bug using TeamViewer x86 Version 13.0.5058 and exploiting the “switch sides” feature, which can give a user control over another system participating in a session. This should only be possible when a user explicitly and manually grants this permission.
The PoC code has been posted on GitHub and is available via the following link: https://github.com/gellin/TeamViewer_Permissions_Hook_V1
TeamViewer confirmed the vulnerability shortly after it was made public and released a patch for Windows. Updates for macOS and Linux are also expected to be released in the coming days.
[su_spacer size=”10″]
Gellin pointed out that such an attack is easy to detect and intercept by terminating the active session, but he emphasized that before the patch was deployed, attackers could exploit this flaw to disable the host's visual input, forcing the target computer's screen to go black, hiding any malicious action from the target user.
[su_spacer size=”10″]
So if you use the popular remote access program, you should update it immediately. It should be noted that even if you have set up automatic updates, it may take three to seven days for the patch to be applied.
[su_spacer size=”10″]
📧
Subscribe to the SecNews Newsletter
