Product:
TeamViewer DEX
Summary
A privilege escalation vulnerability was discovered in TeamViewer DEX, specifically within the 1E-Nomad-SetWorkRate instruction prior to V17.1. The improper handling of executable search paths could allow local attackers with write access to a PATH directory on a device to escalate privileges and execute arbitrary code as SYSTEM.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-64994 |
Exploitation
To exploit this vulnerability, an attacker must have local access to a device and write permissions to a PATH directory. By manipulating the executable search paths, the attacker can escalate their privileges and execute arbitrary code with SYSTEM-level access, potentially compromising the entire system.
Affected Products
- TeamViewer DEX: Affected by the privilege escalation vulnerability allowing local attackers to execute arbitrary code.
Mitigation
To mitigate this vulnerability, users should ensure that they are using the latest version of TeamViewer DEX. Additionally, restricting write access to PATH directories and monitoring for unauthorized changes can help prevent exploitation.