TeamViewer DEX Command Injection Vulnerability in 1E-PatchInsights-Deploy Instruction

A command injection vulnerability exists in TeamViewer DEX (formerly 1E DEX) within the 1E-PatchInsights-Deploy instruction, prior to version 15. The vulnerability arises from improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation of this vulnerability enables remote execution of elevated commands on devices connected to the platform.

Impact

Exploitation allows for remote execution of elevated commands on affected devices.

Remediation

Users can update to TeamViewer DEX version 25.12 or later. For on-premise installations, contact the responsible Customer Success Manager for updates.