Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-64994

Privilege Escalation via Uncontrolled Search Path in 1E-Nomad-SetWorkRate instruction

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TV

Description

A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-SetWorkRate instruction prior V17.1. The improper handling of executable search paths could allow local attackers with write access to a PATH directory on a device to escalate privileges and execute arbitrary code as SYSTEM.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TeamViewer DEX

Default version status: unaffected

  • 0 to < 17.1affected

References