PT-2025-50601 · Teamviewer+1 · Teamviewer Dex+1

Published 2025-12-11 · Updated 2025-12-11 · CVE-2025-64994

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer DEX (former 1E DEX) versions prior to 17.1

Description A privilege escalation issue exists in TeamViewer DEX (formerly 1E DEX) due to improper handling of executable search paths within the 1E-Nomad-SetWorkRate instruction. Local attackers with write access to a PATH directory on a device could exploit this to escalate privileges and execute arbitrary code as SYSTEM.

Recommendations Update TeamViewer DEX to version 17.1 or later.

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-64994

Affected Products

1E Dex

Teamviewer Dex

References · 6

• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64994 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64994 · Security Note
• https://twitter.com/CVEnew/status/1999108847546650774 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1999107001201103260 · Twitter Post
• https://t.me/CVEtracker/39478 · Telegram Post