Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

TeamViewer DEX: Unauthenticated Command Execution on Connected Devices

CVE-2025-64986 · published 10 months ago
Summary

A security flaw in TeamViewer DEX (formerly 1E DEX) allows authorized users to execute unauthorized system commands on connected devices, potentially leading to data theft or system compromise. This affects devices connected to TeamViewer DEX prior to version 21. To prevent remote execution of malicious commands, update to the latest version of TeamViewer DEX.

What to do
  • Update teamviewer digital_employee_experience to version 21.0 or later.
Affected software
VendorProductAffected versions
teamviewer digital_employee_experience < 21.0
cpe:2.3:a:teamviewer:digital_employee_experience:*:*:*:*:*:*:*:*
Original advisory text
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input val...
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-DevicesListeningOnAPort instruction prior V21. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.2 High
Exploitation
1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
CWE-77Command Injection
Timeline
Published11 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-64986 · NVD
Track software like this
Free during beta