CVE Feed

    Dashboard / CVE / CVE-2022-27438

    CVE-2022-27438

    Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

    Published:Jun 6, 2022
    Last Modified:Nov 21, 2024
    EPS:Jun 6, 2022
    EPSS Score:0.12337
    CVSS Score:8.1

    Affected Products

    Vendor
    3cx
    Product
    Call Flow Designer
    Vendor
    3cx
    Product
    Crm Template Generator
    Vendor
    Boom
    Product
    Boomtv Streamer Portal
    Vendor
    Caphyon
    Product
    Advanced Installer
    Vendor
    Codesector
    Product
    Direct Folders
    Vendor
    Codesector
    Product
    Teracopy
    Vendor
    Emeditor
    Product
    Emeditor
    Vendor
    Flamory
    Product
    Flamory
    Vendor
    Freesnippingtool
    Product
    Free Snipping Tool
    Vendor
    Fxsound
    Product
    Fxsound
    Vendor
    Gainedge
    Product
    Better Explorer
    Vendor
    Gamecaster
    Product
    Gamecaster
    Vendor
    Getmailbird
    Product
    Mailbird
    Vendor
    Guzogo
    Product
    Guzogo
    Vendor
    Honeygain
    Product
    Honeygain
    Vendor
    Jki
    Product
    Vi Package Manager
    Vendor
    Jpsoft
    Product
    Take Command
    Vendor
    Krylack
    Product
    Archive Password Recovery
    Vendor
    Krylack
    Product
    Asterisks Password Decryptor
    Vendor
    Krylack
    Product
    Burning Suite
    Vendor
    Krylack
    Product
    Rar Password Recovery
    Vendor
    Krylack
    Product
    Volume Serial Number Editor
    Vendor
    Krylack
    Product
    Zip Password Recovery
    Vendor
    Moonsoftware
    Product
    Password Agent
    Vendor
    Nefarius
    Product
    Scptoolkit
    Vendor
    Plagiarismcheckerx
    Product
    Plagiarism Checker X
    Vendor
    Prusa3d
    Product
    Prusaslicer
    Vendor
    Realdefense
    Product
    Mycleanid
    Vendor
    Realdefense
    Product
    Mycleanpc
    Vendor
    Realdefense
    Product
    Mypasslock
    Vendor
    Rovio
    Product
    Angry Birds Space
    Vendor
    Rovio
    Product
    Bad Piggies
    Vendor
    Rstinstruments
    Product
    C109
    Vendor
    Rstinstruments
    Product
    C109 Firmware
    Vendor
    Rstinstruments
    Product
    Dt2011
    Vendor
    Rstinstruments
    Product
    Dt2011 Firmware
    Vendor
    Rstinstruments
    Product
    Dt2011b
    Vendor
    Rstinstruments
    Product
    Dt2011b Firmware
    Vendor
    Rstinstruments
    Product
    Dt2040
    Vendor
    Rstinstruments
    Product
    Dt2040 Firmware
    Vendor
    Rstinstruments
    Product
    Dt2050
    Vendor
    Rstinstruments
    Product
    Dt2050 Firmware
    Vendor
    Rstinstruments
    Product
    Dt2050b
    Vendor
    Rstinstruments
    Product
    Dt2050b Firmware
    Vendor
    Rstinstruments
    Product
    Dt2055b
    Vendor
    Rstinstruments
    Product
    Dt2055b Firmware
    Vendor
    Rstinstruments
    Product
    Dt2306
    Vendor
    Rstinstruments
    Product
    Dt2306 Firmware
    Vendor
    Rstinstruments
    Product
    Dt2350
    Vendor
    Rstinstruments
    Product
    Dt2350 Firmware
    Vendor
    Rstinstruments
    Product
    Dt2485
    Vendor
    Rstinstruments
    Product
    Dt2485 Firmware
    Vendor
    Rstinstruments
    Product
    Dt4205
    Vendor
    Rstinstruments
    Product
    Dt4205 Firmware
    Vendor
    Rstinstruments
    Product
    Dtl201b\/2b
    Vendor
    Rstinstruments
    Product
    Dtl201b\/2b Firmware
    Vendor
    Rstinstruments
    Product
    Dtsaa
    Vendor
    Rstinstruments
    Product
    Dtsaa Firmware
    Vendor
    Rstinstruments
    Product
    Gaa2820
    Vendor
    Rstinstruments
    Product
    Gaa2820 Firmware
    Vendor
    Rstinstruments
    Product
    Ic6560
    Vendor
    Rstinstruments
    Product
    Ic6560 Firmware
    Vendor
    Rstinstruments
    Product
    Ic6660
    Vendor
    Rstinstruments
    Product
    Ic6660 Firmware
    Vendor
    Rstinstruments
    Product
    Inclinalysis Digital Inclinometer
    Vendor
    Rstinstruments
    Product
    Ipi Utility
    Vendor
    Rstinstruments
    Product
    Ir420
    Vendor
    Rstinstruments
    Product
    Ir420 Firmware
    Vendor
    Rstinstruments
    Product
    Lp100
    Vendor
    Rstinstruments
    Product
    Lp100 Firmware
    Vendor
    Rstinstruments
    Product
    Ma7
    Vendor
    Rstinstruments
    Product
    Ma7 Firmware
    Vendor
    Rstinstruments
    Product
    Mems Tilt Meter
    Vendor
    Rstinstruments
    Product
    Mems Tilt Meter Firmware
    Vendor
    Rstinstruments
    Product
    Mtcm
    Vendor
    Rstinstruments
    Product
    Mtcm Firmware
    Vendor
    Rstinstruments
    Product
    Portable Tilt Meter
    Vendor
    Rstinstruments
    Product
    Portable Tilt Meter Firmware
    Vendor
    Rstinstruments
    Product
    Qb120
    Vendor
    Rstinstruments
    Product
    Qb120 Firmware
    Vendor
    Rstinstruments
    Product
    Rstar Rtu Host
    Vendor
    Rstinstruments
    Product
    Rtu
    Vendor
    Rstinstruments
    Product
    Rtu Firmware
    Vendor
    Rstinstruments
    Product
    Sg350
    Vendor
    Rstinstruments
    Product
    Sg350 Firmware
    Vendor
    Rstinstruments
    Product
    Th2016
    Vendor
    Rstinstruments
    Product
    Th2016 Firmware
    Vendor
    Rstinstruments
    Product
    Th2016b
    Vendor
    Rstinstruments
    Product
    Th2016b Firmware
    Vendor
    Rstinstruments
    Product
    Vw0420
    Vendor
    Rstinstruments
    Product
    Vw0420 Firmware
    Vendor
    Rstinstruments
    Product
    Vw2106
    Vendor
    Rstinstruments
    Product
    Vw2106 Firmware
    Vendor
    Synaptics
    Product
    Displaylink Usb Graphics
    Vendor
    Urban-vpn
    Product
    Urban Vpn
    Vendor
    Vigem
    Product
    Vigembus Driver
    Vendor
    Vpnhood
    Product
    Vpnhood
    Vendor
    Vrdesktop
    Product
    Virtual Desktop Streamer
    Vendor
    Xsplit
    Product
    Xsplit Express Video Editor

    Exploits

    https://gerr.re/posts/cve-2022-27438/https://gerr.re/posts/cve-2022-27438/https://github.com/gar-re/cve-2022-27438

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High