TeamViewer Remote Management Incorrect Permission Assignment Vulnerability Allowing Arbitrary File Deletion with SYSTEM Privileges

A vulnerability exists in TeamViewer Remote Management features (Backup, Monitoring, and Patch Management) on Windows, prior to version 15.67. It allows local unprivileged users to delete files using SYSTEM privileges by exploiting the MSI rollback mechanism. This incorrect permission assignment could lead to unauthorized file removal with elevated rights.

Impact

Exploitation of this vulnerability could result in unauthorized file deletion with SYSTEM privileges, potentially allowing for a general escalation of privileges on the affected system.

Remediation

Users are advised to update TeamViewer to version 15.67 or the latest available version.