CVEvulnerability
CVE-2022-27438
8.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-06-06
- Last modified
- 2026-07-09
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-494
Description
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.
Affected configurations
• caphyon advanced installer (< 19.4)
• 3cx call flow designer 18.2.13
• 3cx crm template generator 2.1.23
• boom boomtv streamer portal 2.2.1
• codesector direct folders 4.0
• codesector teracopy 3.8.5
• emeditor emeditor 21.3.0
• flamory flamory 4.2.19.0
• freesnippingtool free snipping tool 5.6.0.0
• fxsound fxsound 1.1.12.0
• gainedge better explorer 2020.3.15.1304
• gamecaster gamecaster 4.0.2109.2802
• getmailbird mailbird 2.9.50.0
• guzogo guzogo 1.0.5.0
• honeygain honeygain 0.10.7.0
• jki vi package manager 21.1.2754
• jpsoft take command 28.2.18
• krylack archive password recovery 3.70.69
• krylack asterisks password decryptor 3.31.107
• krylack burning suite 1.20.05
• krylack rar password recovery 3.70.69
• krylack volume serial number editor 2.02.34
• krylack zip password recovery 3.70.69
• moonsoftware password agent 20.10.1
• nefarius scptoolkit 1.6.238.16010
• plagiarismcheckerx plagiarism checker x 8.0.6
• prusa3d prusaslicer 2.4.2
• realdefense mycleanid 4.1.4
• realdefense mycleanpc 4.0.2
• realdefense mypasslock 1.9.6
• rovio angry birds space 1.4.1
• rovio bad piggies 1.3.0
• synaptics displaylink usb graphics (< 10.3.6400.0)
• urban-vpn urban vpn 2.2.5
• vigem vigembus driver 1.16.116
• vpnhood vpnhood 2.4.299
• vrdesktop virtual desktop streamer 1.20.16
• xsplit xsplit express video editor 3.0.2001.801
• rstinstruments vw0420 firmware 1.33.0
• rstinstruments inclinalysis digital inclinometer 2.48.9
• rstinstruments ipi utility 1.05.0
• rstinstruments rstar rtu host 1.33.0
• rstinstruments dt2011 firmware 1.19.4.0
• rstinstruments dt2011b firmware 1.19.4.0
• rstinstruments dt2040 firmware 1.19.4.0
• rstinstruments dt2050 firmware 1.19.4.0
• rstinstruments dt2050b firmware 1.19.4.0
• rstinstruments dt2055b firmware 1.19.4.0
• rstinstruments dt2306 firmware 1.19.4.0
• rstinstruments dt2350 firmware 1.19.4.0
• rstinstruments dt2485 firmware 1.19.4.0
• rstinstruments dt4205 firmware 1.19.4.0
• rstinstruments dtsaa firmware 1.19.4.0
• rstinstruments ic6560 firmware 1.19.4.0
• rstinstruments ic6660 firmware 1.19.4.0
• rstinstruments dtl201b\/2b firmware 1.19.4.0
• rstinstruments mtcm firmware 1.19.4.0
• rstinstruments gaa2820 firmware 1.19.4.0
• rstinstruments rtu firmware 1.19.4.0
• rstinstruments mems tilt meter firmware 1.20.1
… and 10 more
Related
Weakness · CWE (1)
- CWE-494 Download of Code Without Integrity Check weakness
References
- https://gerr.re/posts/cve-2022-27438/ Exploit, Third Party Advisory
- https://www.advancedinstaller.com/security-updates-auto-updater.html Patch, Vendor Advisory
- https://gerr.re/posts/cve-2022-27438/ Exploit, Third Party Advisory
- https://www.advancedinstaller.com/security-updates-auto-updater.html Patch, Vendor Advisory