2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["Platform"],"product":"DEX (On-Premises)","vendor":"TeamViewer","versions":[{"lessThan":"9.2","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@teamviewer.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A command\ninjection vulnerability was discovered in TeamViewer DEX Platform On-Premises\n(former 1E DEX Platform On-Premises) prior to version 9.2. Improper input validation allows\nauthenticated users with at least questioner privileges to inject commands in specific\ninstructions. Exploitation could lead to execution of elevated commands on\ndevices connected to the platform."},{"lang":"es","value":"Una vulnerabilidad de inyección de comandos fue descubierta en TeamViewer DEX Platform On-Premises (anteriormente 1E DEX Platform On-Premises) anterior a la versión 9.2. Una validación de entrada inadecuada permite a usuarios autenticados con al menos privilegios de questioner inyectar comandos en instrucciones específicas. La explotación podría conducir a la ejecución de comandos elevados en dispositivos conectados a la plataforma."}],"id":"CVE-2026-2695","lastModified":"2026-10-26T17:10:03.270","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.4,"source":"psirt@teamviewer.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-2695","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-13T17:19:55.259243Z","version":"2.0.3"}}]},"published":"2026-05-13T17:16:19.453","references":[{"source":"psirt@teamviewer.com","url":"https://www.teamviewer.com/de/resources/trust-center/security-bulletins/tv-2026-1004/"}],"sourceIdentifier":"psirt@teamviewer.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"psirt@teamviewer.com","type":"Secondary"}]}
|