TeamViewer DEX Client Denial-of-Service Vulnerability in Content Distribution Service

A denial-of-service vulnerability has been identified in the TeamViewer DEX Client (formerly 1E Client) Content Distribution Service (NomadBranch.exe) for Windows, affecting versions prior to 25.11. The vulnerability arises from improper input validation, allowing malicious actors to send crafted commands that cause the application to crash, thereby terminating the service. Exploitation requires local network-level access.

Impact

Exploitation of this vulnerability leads to an application crash, causing the Content Distribution Service to terminate unexpectedly.

Remediation

Users can update to TeamViewer DEX Client version 25.11.0.29 or later. For those on the 1E Client 24.5.0.69 LTSB version, the update is available through the 1E Support Portal.