An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function.
References
| Link | Resource |
|---|---|
| https://research.hisolutions.com/2020/08/web-vulnerabilities-are-coming-to-the-desktop-again-rces-and-other-vulnerabilities-in-teamwire/ | Exploit Third Party Advisory |
| https://research.hisolutions.com/2020/08/web-vulnerabilities-are-coming-to-the-desktop-again-rces-and-other-vulnerabilities-in-teamwire/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
23 May 2025, 14:45
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:teamwire:teamwire:*:*:*:*:*:*:*:* |
|
| First Time |
Teamwire teamwire
Microsoft windows Microsoft Teamwire |
|
| References | () https://research.hisolutions.com/2020/08/web-vulnerabilities-are-coming-to-the-desktop-again-rces-and-other-vulnerabilities-in-teamwire/ - Exploit, Third Party Advisory |
21 Nov 2024, 08:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://research.hisolutions.com/2020/08/web-vulnerabilities-are-coming-to-the-desktop-again-rces-and-other-vulnerabilities-in-teamwire/ - |
27 Aug 2024, 21:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-94 |
06 Mar 2024, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-05 23:15
Updated : 2025-05-23 14:45
NVD link : CVE-2024-24278
Mitre link : CVE-2024-24278
CVE.ORG link : CVE-2024-24278
JSON object : View
Products Affected
teamwire
- teamwire
microsoft
- windows
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')