CVE-2025-64986

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*

History

08 Oct 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) Se descubrió una vulnerabilidad de inyección de comandos en TeamViewer DEX (anteriormente 1E DEX), específicamente dentro de la instrucción 1E-Explorer-TachyonCore-DevicesListeningOnAPort anterior a la V21. Una validación de entrada inadecuada permite a atacantes autenticados con privilegios de Actioner inyectar comandos arbitrarios. Su explotación permite la ejecución remota de comandos elevados en dispositivos conectados a la plataforma.

Information

Published : 2025-12-11 12:16

Updated : 2026-10-08 10:10

NVD link : CVE-2025-64986

Mitre link : CVE-2025-64986

CVE.ORG link : CVE-2025-64986

JSON object : View

Products Affected

teamviewer

digital_employee_experience

CWE

CWE-20

Improper Input Validation

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2025-64986", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64986", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-11T17:08:20.282921Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@teamviewer.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "psirt@teamviewer.com", "affectedData": [{"vendor": "TeamViewer", "modules": ["Instruction: 1E-Explorer-TachyonCore-DevicesListeningOnAPort"], "product": "DEX", "versions": [{"status": "affected", "version": "0", "lessThan": "21", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-11T12:16:25.400", "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006/", "tags": ["Vendor Advisory"], "source": "psirt@teamviewer.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@teamviewer.com", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform."}, {"lang": "es", "value": "Se descubri\u00f3 una vulnerabilidad de inyecci\u00f3n de comandos en TeamViewer DEX (anteriormente 1E DEX), espec\u00edficamente dentro de la instrucci\u00f3n 1E-Explorer-TachyonCore-DevicesListeningOnAPort anterior a la V21. Una validaci\u00f3n de entrada inadecuada permite a atacantes autenticados con privilegios de Actioner inyectar comandos arbitrarios. Su explotaci\u00f3n permite la ejecuci\u00f3n remota de comandos elevados en dispositivos conectados a la plataforma."}], "lastModified": "2026-10-08T10:10:00.227", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86C851A4-69F1-4E48-994B-545A2092E502", "versionEndExcluding": "21.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@teamviewer.com"}