PT-2025-50598 · 1E+1 · 1E Dex+1

Published 2025-12-11 · Updated 2025-12-11 · CVE-2025-64991

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer DEX (former 1E DEX) versions prior to 15

Description A command injection issue exists in TeamViewer DEX (formerly 1E DEX) within the 1E-PatchInsights-Deploy instruction. Insufficient input validation allows authenticated attackers possessing Actioner privileges to inject arbitrary commands. Successful exploitation allows for the remote execution of elevated commands on devices connected to the platform.

Recommendations Update to version 15 or later.

Fix

RCE

Command Injection

Weakness Enumeration

CWE-20

CWE-77

Related Identifiers

CVE-2025-64991

Affected Products

1E Dex

Teamviewer Dex

References · 6

• https://osv.dev/vulnerability/CVE-2025-64991 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64991 · Security Note
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1999114681030459499 · Twitter Post
• https://t.me/CVEtracker/39475 · Telegram Post
• https://twitter.com/CVEnew/status/1999108851187233217 · Twitter Post