CVE-2022-23242

MediumCVSS 4.2/10Last modified Jun 17, 2026

Description

TeamViewer Linux versions before 15.28 do not properly execute a deletion command for the connection password in case of a process crash. Knowledge of the crash event and the TeamViewer ID as well as either possession of the pre-crash connection password or local authenticated access to the machine would have allowed to establish a remote connection by reusing the not properly deleted connection password.

Metrics

CVSS 3.1 4.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-404

Affected software

VendorProductVersions
TeamViewerTeamViewer for Linux>= 15.27, <= 15.27

References

Timeline

Published
Mar 23, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-23254.8The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, which could allow highCVE-2022-232525.5Microsoft Office Information Disclosure VulnerabilityCVE-2022-232536.5Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityCVE-2022-232544.9Microsoft Power BI Information Disclosure VulnerabilityCVE-2022-232555.9Microsoft OneDrive for Android Security Feature Bypass VulnerabilityCVE-2022-232564.3Azure Data Explorer Spoofing VulnerabilityCVE-2022-232578.8Windows Hyper-V Remote Code Execution VulnerabilityCVE-2022-232584.3Microsoft Edge for Android Spoofing VulnerabilityCVE-2022-232598.8Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityCVE-2022-23268.1An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all versioCVE-2022-232615.3Microsoft Edge (Chromium-based) Tampering VulnerabilityCVE-2022-232626.3Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2022-23242: Medium severity, CVSS 4.2 | Vulnix