Description
A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions instructions. Improper input validation, allowing authenticated attackers with Actioner privileges to inject arbitrary commands. Exploitation enables remote execution of elevated commands on devices connected to the platform.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TeamViewer | DEX | < 29, < 30 | 29 |