ID:11740 - Exploit for Missing Authorization in TeamViewer Remote Full Client for Windows - CVE-2024-7479

 
Main Vulnerability Database Exploits ID:11740 - Exploit for Missing Authorization in TeamViewer Remote Full Client for Windows - CVE-2024-7479

ID:11740 - Exploit for Missing Authorization in TeamViewer Remote Full Client for Windows - CVE-2024-7479

Published: July 3, 2025


Vulnerability identifier: #VU97734
Vulnerability risk: Low
CVE-ID: CVE-2024-7479
CWE-ID: CWE-862
Exploitation vector: Local access
Vulnerable software:
TeamViewer Remote Full Client for Windows

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to missing authorization during installation of a VPN driver via the TeamViewer_service.exe component, which listens on TCP port 5939. A local user can access the component and execute arbitrary code with elevated privileges.


Remediation

Install updates from vendor's website.