What is CVE-2020-13699?

CVE-2020-13699 is a vulnerability in N/a. Published 2020-07-29.

Is CVE-2020-13699 known to be exploited?

7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2020-13699

TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10: --play URL. An attacker could force a v…

EPSS: 0.729 (98.8th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

Dilshan-Eranda/CVE-2020-13699
rapid7/metasploit-framework
ARPSyndicate/cve-scores
ARPSyndicate/cvemon
alphaSeclab/sec-daily-2020
nomi-sec/PoC-in-GitHub
soosmile/POC

References

community.teamviewer.com/t5/Announcements/Statement-on-CVE-2020-13699/td-p/98448 (x_refsource_CONFIRM)
jeffs.sh/CVEs/CVE-2020-13699.txt (x_refsource_MISC)

Frequently asked questions

What is CVE-2020-13699?: CVE-2020-13699 is a vulnerability in N/a. Published 2020-07-29.
Is CVE-2020-13699 known to be exploited?: 7 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.