[{"vendor":"1e","product":"client","defaultStatus":"unknown","cpes":["cpe:2.3:a:1e:client:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"8.1.2.62","versionType":"custom","status":"affected"},{"version":"0","lessThan":"8.4.1.159","versionType":"custom","status":"affected"},{"version":"0","lessThan":"9.0.1.88","versionType":"custom","status":"affected"},{"version":"0","lessThan":"23.7.1.151","versionType":"custom","status":"affected"}]}]

{"timestamp":"2024-09-19T17:33:38.940543Z","id":"CVE-2023-45159","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"1E","product":"1E Client","defaultStatus":"affected","platforms":["Windows"],"versions":[{"version":"0","lessThan":"8.1.2.62","versionType":"Q23097","status":"affected","changes":[{"at":"Q23097","status":"unaffected"}]},{"version":"0","lessThan":"8.4.1.159","versionType":"Q23105","status":"affected","changes":[{"at":"Q23105","status":"unaffected"}]},{"version":"0","lessThan":"9.0.1.88","versionType":"Q23115","status":"affected","changes":[{"at":"Q23115","status":"unaffected"}]},{"version":"0","lessThan":"23.7.1.151","versionType":"Q23121","status":"affected","changes":[{"at":"Q23121","status":"unaffected"}]}]}]

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2001/

https://www.1e.com/trust-security-compliance/cve-info/

https://www.1e.com/trust-security-compliance/cve-info/ Types: Vendor Advisory

https://www.1e.com/trust-security-compliance/cve-info/

1E Limited AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

1E Limited AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

AV-File parsed local

S-Unclear if Scope change occurs

UI-User Interaction not identified

1E Client installer can perform arbitrary file deletion on protected files.  

A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. A hotfix is available Q23092 that forces the 1E Client to check for a symbolic link or junction and if it finds one refuses to use that path and instead creates a path involving a random GUID.

1E Client installer can perform arbitrary file deletion on protected files.  

A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. 

A hotfix is available from the 1E support portal that forces the 1E Client to check for a symbolic link or junction and if it finds one refuses to use that path and instead creates a path involving a random GUID.

for v8.1 use hotfix Q23097
for v8.4 use hotfix Q23105
for v9.0 use hotfix Q23115

for SaaS customers, use 1EClient v23.7 plus hotfix Q23121

NIST AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST CWE-59

OR
     *cpe:2.3:a:1e:client:8.1.2.62:*:*:*:*:windows:*:*
     *cpe:2.3:a:1e:client:8.4.1.159:*:*:*:*:windows:*:*
     *cpe:2.3:a:1e:client:9.0.1.88:*:*:*:*:windows:*:*
     *cpe:2.3:a:1e:client:23.7.1.151:*:*:*:*:windows:*:*

https://www.1e.com/trust-security-compliance/cve-info/ No Types Assigned

https://www.1e.com/trust-security-compliance/cve-info/ Vendor Advisory