TeamViewer has shipped version-specific security vulnerabilities that must be described and tested individually. Authorization issues can affect what a connected party may do, while CVE-2020-13699 affected custom URI handling in TeamViewer Desktop for Windows and could coerce an outbound NTLM authentication request. That CVE was not direct TeamViewer remote code execution. Identify the exact product, platform, and build, then compare them with the affected and fixed versions in the relevant advisory.
Subtopics#
- TeamViewer authorization and configuration assessment: separating policy findings from version-specific vulnerabilities.
- TeamViewer NTLM coercion: CVE-2020-13699 custom-URI handling.