Exploited· due 2022-05-03

CVE-2019-18988

TeamViewer Desktop

TeamViewer Desktop allows for bypass of remote-login access control because the same AES key is used for different customers' installations. If an attacker were to know this key, they could decrypt protected information stored in registry or configuration files or decryption of the Unattended Access password to the system (which allows for remote login to the system).

Exploitation status

  • CISA has confirmed this is being exploited in the wild. That is an observation of real attacks, not a prediction.
  • US federal civilian agencies are required to remediate it by 2022-05-03. That deadline does not bind private companies, but it is a reasonable benchmark for how urgently CISA views it.

Required action

Apply updates per vendor instructions.

CISA’s wording, unedited.

Scoring

CVSS
Not yet scored

Dates

Published
2021-11-03
Added to KEV
2021-11-03
Remediation due
2022-05-03
Sources
CISA KEV