TeamViewer DEX Client up to 24.5.0.69/25.5.053/25.9.0.46 on Windows Content Distribution Service NomadBranch.exe denial of service

Summaryinfo

A vulnerability, which was classified as problematic, has been found in TeamViewer DEX Client up to 24.5.0.69/25.5.053/25.9.0.46 on Windows. This issue affects some unknown processing of the file NomadBranch.exe of the component Content Distribution Service. Performing a manipulation results in denial of service. This vulnerability is cataloged as CVE-2025-12687. The attack must originate from the local network. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in TeamViewer DEX Client up to 24.5.0.69/25.5.053/25.9.0.46 on Windows. This affects an unknown functionality of the file NomadBranch.exe of the component Content Distribution Service. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. The summary by CVE is:

A vulnerability in TeamViewer DEX Client (former 1E Client) - Content Distribution Service (NomadBranch.exe) prior version 25.11 for Windows allows malicious actors to cause a denial of service (application crash) via a crafted command, resulting in service termination.

The weakness was shared with Bank of America. The advisory is shared at teamviewer.com. This vulnerability is uniquely identified as CVE-2025-12687 since 11/04/2025. The exploitability is told to be easy. The attack can only be done within the local network. No form of authentication is needed for exploitation. Technical details are known, but no exploit is available.

Upgrading to version 25.11.0.29 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• TeamViewer

Name

• DEX Client

Version

• 24.5.0.0
• 24.5.0.1
• 24.5.0.2
• 24.5.0.3
• 24.5.0.4
• 24.5.0.5
• 24.5.0.6
• 24.5.0.7
• 24.5.0.8
• 24.5.0.9
• 24.5.0.10
• 24.5.0.11
• 24.5.0.12
• 24.5.0.13
• 24.5.0.14
• 24.5.0.15
• 24.5.0.16
• 24.5.0.17
• 24.5.0.18
• 24.5.0.19
• 24.5.0.20
• 24.5.0.21
• 24.5.0.22
• 24.5.0.23
• 24.5.0.24
• 24.5.0.25
• 24.5.0.26
• 24.5.0.27
• 24.5.0.28
• 24.5.0.29
• 24.5.0.30
• 24.5.0.31
• 24.5.0.32
• 24.5.0.33
• 24.5.0.34
• 24.5.0.35
• 24.5.0.36
• 24.5.0.37
• 24.5.0.38
• 24.5.0.39
• 24.5.0.40
• 24.5.0.41
• 24.5.0.42
• 24.5.0.43
• 24.5.0.44
• 24.5.0.45
• 24.5.0.46
• 24.5.0.47
• 24.5.0.48
• 24.5.0.49
• 24.5.0.50
• 24.5.0.51
• 24.5.0.52
• 24.5.0.53
• 24.5.0.54
• 24.5.0.55
• 24.5.0.56
• 24.5.0.57
• 24.5.0.58
• 24.5.0.59
• 24.5.0.60
• 24.5.0.61
• 24.5.0.62
• 24.5.0.63
• 24.5.0.64
• 24.5.0.65
• 24.5.0.66
• 24.5.0.67
• 24.5.0.68
• 24.5.0.69
• 25.5.053
• 25.9.0.0
• 25.9.0.1
• 25.9.0.2
• 25.9.0.3
• 25.9.0.4
• 25.9.0.5
• 25.9.0.6
• 25.9.0.7
• 25.9.0.8
• 25.9.0.9
• 25.9.0.10
• 25.9.0.11
• 25.9.0.12
• 25.9.0.13
• 25.9.0.14
• 25.9.0.15
• 25.9.0.16
• 25.9.0.17
• 25.9.0.18
• 25.9.0.19
• 25.9.0.20
• 25.9.0.21
• 25.9.0.22
• 25.9.0.23
• 25.9.0.24
• 25.9.0.25
• 25.9.0.26
• 25.9.0.27
• 25.9.0.28
• 25.9.0.29
• 25.9.0.30
• 25.9.0.31
• 25.9.0.32
• 25.9.0.33
• 25.9.0.34
• 25.9.0.35
• 25.9.0.36
• 25.9.0.37
• 25.9.0.38
• 25.9.0.39
• 25.9.0.40
• 25.9.0.41
• 25.9.0.42
• 25.9.0.43
• 25.9.0.44
• 25.9.0.45
• 25.9.0.46

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion