TeamViewer DEX Client Log Injection Vulnerability in Content Distribution Service

A log injection vulnerability has been identified in the TeamViewer DEX Client (formerly 1E Client) Content Distribution Service (NomadBranch.exe) for Windows, prior to version 26.1. This vulnerability allows an attacker on the adjacent network to inject, tamper with, or forge log entries in the Nomad Branch.log file. The exploitation involves sending crafted data to the UDP network handler, which can compromise the integrity of the logs and disrupt non-repudiation.

Impact

Exploitation of this vulnerability can lead to unauthorized modification of log entries, affecting the integrity of the logs and disrupting non-repudiation.

Remediation

Users are advised to update to TeamViewer DEX Client version 26.1 or the latest available version. Installations with the Content Distribution Service disabled are not affected.