TeamViewer DEX Client Unencrypted UDP Traffic Vulnerability

A vulnerability exists in the TeamViewer DEX Client (formerly 1E Client) Content Distribution Service (NomadBranch.exe) on Windows, prior to version 26.1. This vulnerability allows an attacker on the adjacent network to intercept normally encrypted UDP traffic, causing sensitive information to be transmitted in cleartext. The issue has been resolved in version 26.1, and users are advised to update to the latest version. By default, the Content Distribution Service is disabled, and installations with this service turned off are not affected.

Impact

Exploitation of this vulnerability could lead to the unauthorized disclosure of sensitive information due to the interception of unencrypted UDP traffic.

Remediation

Users are recommended to update to TeamViewer DEX Client version 26.1 or the latest available version.