Description (CNA)
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 30 |
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 29 |
| TeamViewer / DEX | affected 0 before 29 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.
No references supplied.