CVE-2022-27438

    Dashboard / Vulnerabilities / CVE-2022-27438

    CVE-2022-27438

    Published: 6 Jun 2022Last Modified: 12 Aug 2026

    Summary:

    Details: Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

    References: https://gerr.re/posts/cve-2022-27438/, https://www.advancedinstaller.com/security-updates-auto-updater.html, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27438.json, https://nvd.nist.gov/vuln/detail/CVE-2022-27438

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- d7105dabf1db80e1babbb5d4cb386cd747c46364
    Fixed -None

    Affected versions

    2.4.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-27438 | CVE-DB