CVE-2025-12687 - Vulnerability Details - OpenCVE

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Microsoft	Windows
Teamviewer	Dex

No data.

No data.

References

Link	Providers
https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/

History

Thu, 11 Dec 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 11 Dec 2025 16:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft Microsoft windows Teamviewer Teamviewer dex
Vendors & Products		Microsoft Microsoft windows Teamviewer Teamviewer dex

Thu, 11 Dec 2025 11:45:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.
Title		Denial-of-Service Vulnerability in NomadBranch.exe
Weaknesses		CWE-20
References		https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: TV

Published: 2025-12-11T11:24:15.265Z

Updated: 2025-12-11T17:21:45.837Z

Reserved: 2025-11-04T08:30:21.490Z

Link: CVE-2025-12687

Vulnrichment

Updated: 2025-12-11T17:21:43.196Z

NVD

Status : Received

Published: 2025-12-11T12:16:23.780

Modified: 2025-12-11T12:16:23.780

Link: CVE-2025-12687

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12687", "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "state": "PUBLISHED", "assignerShortName": "TV", "dateReserved": "2025-11-04T08:30:21.490Z", "datePublished": "2025-12-11T11:24:15.265Z", "dateUpdated": "2025-12-11T17:21:45.837Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "modules": ["Content Distribution Service", "NomadBranch.exe"], "platforms": ["Windows"], "product": "DEX", "vendor": "TeamViewer", "versions": [{"lessThan": "25.11.0.29", "status": "affected", "version": "0", "versionType": "custom"}, {"changes": [{"at": "HF-PLTPKG-524", "status": "unaffected"}], "lessThanOrEqual": "25.9.0.46", "status": "affected", "version": "0", "versionType": "custom"}, {"changes": [{"at": "HF-PLTPKG-526", "status": "unaffected"}], "lessThanOrEqual": "25.5.053", "status": "affected", "version": "0", "versionType": "custom"}, {"changes": [{"at": "HF-PLTPKG-525", "status": "unaffected"}], "lessThanOrEqual": "24.5.0.69", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Threat Hunt Team of Bank of America"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination."}], "value": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "shortName": "TV", "dateUpdated": "2025-12-11T11:24:15.265Z"}, "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update the TeamViewer DEX client to the latest available version."}], "value": "Update the TeamViewer DEX client to the latest available version."}], "source": {"discovery": "EXTERNAL"}, "title": "Denial-of-Service Vulnerability in NomadBranch.exe", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-12-11T17:21:39.863685Z", "id": "CVE-2025-12687", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-11T17:21:45.837Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12687", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-11T17:21:39.863685Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-12-11T17:21:43.196Z"}}], "cna": {"title": "Denial-of-Service Vulnerability in NomadBranch.exe", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Threat Hunt Team of Bank of America"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "TeamViewer", "modules": ["Content Distribution Service", "NomadBranch.exe"], "product": "DEX", "versions": [{"status": "affected", "version": "0", "lessThan": "25.11.0.29", "versionType": "custom"}, {"status": "affected", "changes": [{"at": "HF-PLTPKG-524", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "25.9.0.46"}, {"status": "affected", "changes": [{"at": "HF-PLTPKG-526", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "25.5.053"}, {"status": "affected", "changes": [{"at": "HF-PLTPKG-525", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "24.5.0.69"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update the TeamViewer DEX client to the latest available version.", "supportingMedia": [{"type": "text/html", "value": "Update the TeamViewer DEX client to the latest available version.", "base64": false}]}], "references": [{"url": "https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2025-1005/"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "shortName": "TV", "dateUpdated": "2025-12-11T11:24:15.265Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12687", "state": "PUBLISHED", "dateUpdated": "2025-12-11T17:21:45.837Z", "dateReserved": "2025-11-04T08:30:21.490Z", "assignerOrgId": "13430f76-86eb-43b2-a71c-82c956ef31b6", "datePublished": "2025-12-11T11:24:15.265Z", "assignerShortName": "TV"}, "dataVersion": "5.2"}