TeamViewer DEX Command Injection Vulnerability

TeamViewer DEX is a remote desktop management software used to manage and control devices connected to the platform. This vulnerability allows authenticated attackers with Actioner privileges to inject arbitrary commands on devices connected to the platform, potentially leading to unauthorized access to sensitive data or elevated system execution.

You're affected if you use A command. Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

1. Upgrade to TeamViewer DEX version 1.15.0.1 or later from the official TeamViewer website: https://www.teamviewer.com/en/downloads.
2. Immediate mitigations:
3. Restrict network access to your TV Dex instance (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized token creation

• www.teamviewer.com