Known product exploits

Alongside weak configuration, remote-desktop products have shipped version-specific vulnerabilities and experienced security incidents. Assess them from a named advisory or vendor disclosure: identify the affected product, platform, and build; distinguish authentication bypass, authorization failure, credential coercion, local privilege escalation, and direct code execution; and preserve any user-interaction or prior-access prerequisite. Product category alone is not evidence that one of these impacts applies.

Subtopics#

• TeamViewer: version-specific authorization issues and NTLM credential coercion.
• AnyDesk incident and configuration assessment: documented production-system compromise, certificate replacement, and evidence-based local review.

References#

• TeamViewer security advisories
• AnyDesk security advisories