← Vulnerability feed

Vulnerability record · CVE-2022-23242 · published 23 March 2022

CVE-2022-23242: Teamviewer improper resource shutdown vulnerability

Teamviewer · Teamviewer

TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password.

4.2 CVSS 3.1 Medium EPSS 0.21% · top 90.0% CWE-404 · Improper resource shutdown
4.2CVSS 3.1 base score, v2 1.9
0.21%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password.

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.teamviewer.com/en/trust-center/security-bulletins/TV-2022-1001/ PatchVendor Advisory
https://www.teamviewer.com/en/trust-center/security-bulletins/TV-2022-1001/ PatchVendor Advisory

Track CVE-2022-23242 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.0CVE-2019-18988TeamViewer Desktop shared AES key bypasses remote-login access controlTeamViewer Desktop through 14.7.1965 uses the same AES key across all customer installations, including for OptionsPasswordAES. Anyone who knows that…KEVEPSS 4.7%analysed9.8CVE-2018-16550Teamviewer vulnerabilityTeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, whi…EPSS 3.6%9.3CVE-2010-3128Teamviewer vulnerabilityUntrusted search path vulnerability in TeamViewer 5.0.8703 and earlier allows local users, and possibly remote attackers, to execute arbitrary code a…EPSS 8.4%8.8CVE-2021-34859Teamviewer memory buffer overflow vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer 15.16.8.0. User interaction is required …EPSS 8.9%8.8CVE-2020-13699Teamviewer argument injection vulnerabilityTeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitr…EPSS 26%8.8CVE-2019-18251Omron cx-supervisor vulnerabilityIn Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vul…EPSS 1.7%8.1CVE-2018-14333Teamviewer information exposure vulnerabilityTeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, w…EPSS 2.6%7.8CVE-2021-34858Teamviewer out-of-bounds read vulnerabilityThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. User interaction is required to exploit…EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2022-23242), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.