Command Injection Vulnerability in TeamViewer DEX
CVE-2025-64992

6.8MEDIUM

Key Information:

Vendor

Teamviewer

Status
Dex
Vendor
CVE Published:
11 December 2025

What is CVE-2025-64992?

A command injection flaw was identified in TeamViewer DEX, impacting versions prior to 25. This issue arises from improper input validation in the 1E-Nomad-PauseNomadJobQueue command, enabling authenticated attackers with Actioner privileges to inject malicious commands. Successful exploitation can lead to the remote execution of elevated commands on devices linked to the platform, potentially compromising system integrity and security.

Affected Version(s)

DEX 0 < 25

References

https://www.teamviewer.com/en/resources/trust-center/secu...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lockheed Martin Red Team
JSON
.