CVE-2025-64991 — Command Injection in 1E-PatchInsights-Deploy Instruction

CVE-2025-64991

Command Injection in 1E-PatchInsights-Deploy Instruction PUBLISHED

Description (CNA)

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

Affected (CNA)

Vendor / product	Versions
TeamViewer / DEX	affected 0 before 15

CWE

CWE-20

References

https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1006/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.