CVEvulnerability

CVE-2022-27438

8.1 HIGH Published 2022-06-06 Modified 2026-07-09 Official page ↗
Status
Modified
Published
2022-06-06
Last modified
2026-07-09
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-494

Description

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

Affected configurations

• caphyon advanced installer (< 19.4) • 3cx call flow designer 18.2.13 • 3cx crm template generator 2.1.23 • boom boomtv streamer portal 2.2.1 • codesector direct folders 4.0 • codesector teracopy 3.8.5 • emeditor emeditor 21.3.0 • flamory flamory 4.2.19.0 • freesnippingtool free snipping tool 5.6.0.0 • fxsound fxsound 1.1.12.0 • gainedge better explorer 2020.3.15.1304 • gamecaster gamecaster 4.0.2109.2802 • getmailbird mailbird 2.9.50.0 • guzogo guzogo 1.0.5.0 • honeygain honeygain 0.10.7.0 • jki vi package manager 21.1.2754 • jpsoft take command 28.2.18 • krylack archive password recovery 3.70.69 • krylack asterisks password decryptor 3.31.107 • krylack burning suite 1.20.05 • krylack rar password recovery 3.70.69 • krylack volume serial number editor 2.02.34 • krylack zip password recovery 3.70.69 • moonsoftware password agent 20.10.1 • nefarius scptoolkit 1.6.238.16010 • plagiarismcheckerx plagiarism checker x 8.0.6 • prusa3d prusaslicer 2.4.2 • realdefense mycleanid 4.1.4 • realdefense mycleanpc 4.0.2 • realdefense mypasslock 1.9.6 • rovio angry birds space 1.4.1 • rovio bad piggies 1.3.0 • synaptics displaylink usb graphics (< 10.3.6400.0) • urban-vpn urban vpn 2.2.5 • vigem vigembus driver 1.16.116 • vpnhood vpnhood 2.4.299 • vrdesktop virtual desktop streamer 1.20.16 • xsplit xsplit express video editor 3.0.2001.801 • rstinstruments vw0420 firmware 1.33.0 • rstinstruments inclinalysis digital inclinometer 2.48.9 • rstinstruments ipi utility 1.05.0 • rstinstruments rstar rtu host 1.33.0 • rstinstruments dt2011 firmware 1.19.4.0 • rstinstruments dt2011b firmware 1.19.4.0 • rstinstruments dt2040 firmware 1.19.4.0 • rstinstruments dt2050 firmware 1.19.4.0 • rstinstruments dt2050b firmware 1.19.4.0 • rstinstruments dt2055b firmware 1.19.4.0 • rstinstruments dt2306 firmware 1.19.4.0 • rstinstruments dt2350 firmware 1.19.4.0 • rstinstruments dt2485 firmware 1.19.4.0 • rstinstruments dt4205 firmware 1.19.4.0 • rstinstruments dtsaa firmware 1.19.4.0 • rstinstruments ic6560 firmware 1.19.4.0 • rstinstruments ic6660 firmware 1.19.4.0 • rstinstruments dtl201b\/2b firmware 1.19.4.0 • rstinstruments mtcm firmware 1.19.4.0 • rstinstruments gaa2820 firmware 1.19.4.0 • rstinstruments rtu firmware 1.19.4.0 • rstinstruments mems tilt meter firmware 1.20.1 … and 10 more

Related

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

References