VULNERABILITY INTELLIGENCE

CVE-2025-64993

CVSS score6.8 MEDIUM
EPSS probability0.87%
CISA KEVNot currently listed
Published2025-12-11
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Description

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

Weakness classification

  • psirt@teamviewer.com: CWE-20
  • nvd@nist.gov: CWE-77

Primary references