CVE-2025-64991

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

CVSS v3 6.8 MEDIUM

6.8^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006/	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*

History

08 Oct 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de inyección de comandos fue descubierta en TeamViewer DEX (anteriormente 1E DEX), específicamente dentro de la instrucción 1E-PatchInsights-Deploy anterior a la V15. Validación de entrada inadecuada, permitiendo a atacantes autenticados con privilegios de Actioner inyectar comandos arbitrarios. La explotación permite la ejecución remota de comandos elevados en dispositivos conectados a la plataforma.

Information

Published : 2025-12-11 12:16

Updated : 2026-10-08 10:10

NVD link : CVE-2025-64991

Mitre link : CVE-2025-64991

CVE.ORG link : CVE-2025-64991

JSON object : View

Products Affected

teamviewer

digital_employee_experience

CWE

CWE-20

Improper Input Validation

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2025-64991", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64991", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-11T16:17:04.277981Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@teamviewer.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "psirt@teamviewer.com", "affectedData": [{"vendor": "TeamViewer", "modules": ["1E-Explorer-TachyonCore-LogoffUser Instruction"], "product": "DEX", "versions": [{"status": "affected", "version": "0", "lessThan": "15", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-11T12:16:26.063", "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006/", "tags": ["Vendor Advisory"], "source": "psirt@teamviewer.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@teamviewer.com", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n de comandos fue descubierta en TeamViewer DEX (anteriormente 1E DEX), espec\u00edficamente dentro de la instrucci\u00f3n 1E-PatchInsights-Deploy anterior a la V15. Validaci\u00f3n de entrada inadecuada, permitiendo a atacantes autenticados con privilegios de Actioner inyectar comandos arbitrarios. La explotaci\u00f3n permite la ejecuci\u00f3n remota de comandos elevados en dispositivos conectados a la plataforma."}], "lastModified": "2026-10-08T10:10:00.227", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25F901BE-3CD2-4D8F-A58B-E3EFCEBB5E5B", "versionEndExcluding": "15.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@teamviewer.com"}