Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wpgp-vmg7-5726

Опубликовано: 11 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

EPSS

Процентиль: 30%
0.00113
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-20
CWE-77

Связанные уязвимости

CVSS3: 6.8
nvd
около 2 месяцев назад

A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruction prior V15. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.

EPSS

Процентиль: 30%
0.00113
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-20
CWE-77