CVE-2025-64994
BaseFortify
Publication date: 2025-12-11
Last updated on: 2025-12-11
Assigner: TeamViewer Germany GmbH
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| teamviewer | teamviewer_dex | 17.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-427 | The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a privilege escalation issue in TeamViewer DEX (formerly 1E DEX) versions prior to 17.1. It occurs due to improper handling of executable search paths in the 1E-Nomad-SetWorkRate instruction. A local attacker who has write access to a directory listed in the system PATH could exploit this to execute arbitrary code with SYSTEM-level privileges.
How can this vulnerability impact me? :
If exploited, this vulnerability allows a local attacker to escalate their privileges to SYSTEM level, potentially leading to full control over the affected device. This could result in unauthorized code execution, data compromise, or disruption of system operations.