PT-2025-50602 · 1E+1 · 1E Dex+1

Published 2025-12-11 · Updated 2025-12-11 · CVE-2025-64995

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TeamViewer DEX versions prior to 3.4

Description A privilege escalation issue exists in TeamViewer DEX (formerly 1E DEX). The problem is located within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction. Insufficient protection of the execution path on a local device allows attackers with local access to hijack the process during execution and run arbitrary code with SYSTEM privileges.

Recommendations Update TeamViewer DEX to version 3.4 or later.

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-64995

Affected Products

1E Dex

Teamviewer Dex

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-64995 · Security Note
• https://teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64995 · Vendor Advisory
• https://twitter.com/CVEnew/status/1999108846288298200 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1999104441446772769 · Twitter Post
• https://t.me/CVEtracker/39479 · Telegram Post