Product:
TeamViewer DEX
Summary
A privilege escalation vulnerability was discovered in TeamViewer DEX, specifically within the 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction prior V3.4. Improper protection of the execution path on the local device allows attackers with local access to hijack the process and execute arbitrary code with SYSTEM privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-64995 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the device running TeamViewer DEX. By executing the vulnerable instruction, the attacker can manipulate the execution path, allowing them to hijack the process and gain SYSTEM privileges, which can lead to further exploitation of the system.
Affected Products
- TeamViewer DEX: Affected prior to version 3.4, this product allows for remote access and management but has a vulnerability that can be exploited for privilege escalation.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of TeamViewer DEX that addresses this issue. Additionally, restricting local access to devices running the software can help prevent unauthorized exploitation.