Medium severity · published Jun 14, 2023
CVE-2023-0837
An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged user to change basic…
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged user to change basic local device settings even though the options were locked. This can result in unwanted changes to the configuration.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Remote · Teamviewer
15.41 before 15.42.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-0837
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-0837
Vendor Advisory
https://www.teamviewer.com/en/trust-center/security-bulletins/tv-2023-1001/
More from Remote
8.0
CVE-2026-12703
Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS
7.8
CVE-2024-0819
Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by…