CVE-2018-16550

EUVD-2018-8359
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by skipping the "Cancel" step, which makes it easier to determine the correct value of the default 4-digit PIN.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
teamviewerteamviewer
10.0.2551 ≤
𝑥
≤ 13.2.9356
𝑥
= Vulnerable software versions
References
https://twitter.com/vah_13/status/1036894081350291457
https://twitter.com/vah_13/status/1036894081350291457