PT-2025-50599 · 1E+1 · 1E Dex+1

Published 2025-12-11 · Updated 2025-12-11 · CVE-2025-64992

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer DEX (former 1E DEX) versions prior to V25

Description A command injection issue exists in TeamViewer DEX (formerly 1E DEX) related to the 1E-Nomad-PauseNomadJobQueue instruction. Insufficient input validation allows authenticated attackers possessing Actioner privileges to inject arbitrary commands. Successful exploitation allows remote execution of elevated commands on devices connected to the platform.

Recommendations Update to version V25 or later.

Fix

RCE

Command Injection

Weakness Enumeration

CWE-20

CWE-77

Related Identifiers

CVE-2025-64992

Affected Products

1E Dex

Teamviewer Dex

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-64992 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64992 · Vendor Advisory
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006 · Vendor Advisory
• https://twitter.com/CVEnew/status/1999108849979281877 · Twitter Post
• https://t.me/CVEtracker/39476 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1999112121125085427 · Twitter Post