CVE-2025-64988highCWE-20

CVE-2025-64988: fallo de gravedad alta en TeamViewer DEX

Command Injection in 1E-Nomad-GetCmContentLocations Instruction

Publicada el

Seguir esta CVE+ Monitorear DEX

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.2epss 1.1%
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-GetCmContentLocations instruction prior V19.2. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
TeamViewer · DEX
CVEs relacionadas — TeamViewer DEX

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-64986HIGHCommand Injection in 1E-Explorer-TachyonCore-DevicesListeningOnAPort InstructionEPSS 1.2%CVE-2025-64987HIGHCommand Injection in 1E-Explorer-TachyonCore-CheckSimpleIoC InstructionEPSS 1.1%CVE-2025-64989HIGHCommand Injection in 1E-Explorer-TachyonCore-FindFileBySizeAndHash InstructionEPSS 1.1%CVE-2025-64993MEDIUMCommand Injection in 1E-ConfigMgrConsoleExtensions InstructionsEPSS 0.9%CVE-2025-64992MEDIUMCommand Injection in 1E-Nomad-PauseNomadJobQueue InstructionEPSS 0.9%CVE-2025-64991MEDIUMCommand Injection in 1E-PatchInsights-Deploy InstructionEPSS 0.9%