CVE-2022-27438

Exploit

EPSS 1.98%
Veröffentlicht 06.06.2022 23:15:07
Zuletzt bearbeitet 09.07.2026 01:17:24
Erkennungen
Login

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 69 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Caphyon ≫ Advanced Installer Version < 19.4

3cx ≫ Call Flow Designer Version 18.2.13

3cx ≫ Crm Template Generator Version 2.1.23

Boom ≫ Boomtv Streamer Portal Version 2.2.1

Codesector ≫ Direct Folders Version 4.0

Codesector ≫ Teracopy Version 3.8.5

Emeditor ≫ Emeditor Version 21.3.0

Flamory ≫ Flamory Version 4.2.19.0

Freesnippingtool ≫ Free Snipping Tool Version 5.6.0.0

Fxsound ≫ Fxsound Version 1.1.12.0

Gainedge ≫ Better Explorer Version 2020.3.15.1304

Gamecaster ≫ Gamecaster Version 4.0.2109.2802

Getmailbird ≫ Mailbird Version 2.9.50.0

Guzogo ≫ Guzogo Version 1.0.5.0

Honeygain ≫ Honeygain Version 0.10.7.0 SwPlatform windows

Jki ≫ Vi Package Manager Version 21.1.2754

Jpsoft ≫ Take Command Version 28.2.18

Krylack ≫ Archive Password Recovery Version 3.70.69

Krylack ≫ Asterisks Password Decryptor Version 3.31.107

Krylack ≫ Burning Suite Version 1.20.05

Krylack ≫ Rar Password Recovery Version 3.70.69

Krylack ≫ Volume Serial Number Editor Version 2.02.34

Krylack ≫ Zip Password Recovery Version 3.70.69

Moonsoftware ≫ Password Agent Version 20.10.1

Nefarius ≫ Scptoolkit Version 1.6.238.16010

Plagiarismcheckerx ≫ Plagiarism Checker X Version 8.0.6

Prusa3d ≫ Prusaslicer Version 2.4.2

Realdefense ≫ Mycleanid Version 4.1.4

Realdefense ≫ Mycleanpc Version 4.0.2

Realdefense ≫ Mypasslock Version 1.9.6

Rovio ≫ Angry Birds Space Version 1.4.1

Rovio ≫ Bad Piggies Version 1.3.0

Synaptics ≫ Displaylink Usb Graphics SwPlatform windows Version < 10.3.6400.0

Urban-vpn ≫ Urban Vpn Version 2.2.5

Vigem ≫ Vigembus Driver Version 1.16.116

Vpnhood ≫ Vpnhood Version 2.4.299 SwPlatform windows

Vrdesktop ≫ Virtual Desktop Streamer Version 1.20.16

Xsplit ≫ Xsplit Express Video Editor Version 3.0.2001.801

Rstinstruments ≫ Vw0420 Firmware Version 1.33.0

Rstinstruments ≫ Vw0420 Version -

Rstinstruments ≫ Inclinalysis Digital Inclinometer Version 2.48.9

Rstinstruments ≫ Ipi Utility Version 1.05.0

Rstinstruments ≫ Rstar Rtu Host Version 1.33.0

Rstinstruments ≫ Dt2011 Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2011 Version -

Rstinstruments ≫ Dt2011b Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2011b Version -

Rstinstruments ≫ Dt2040 Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2040 Version -

Rstinstruments ≫ Dt2050 Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2050 Version -

Rstinstruments ≫ Dt2050b Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2050b Version -

Rstinstruments ≫ Dt2055b Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2055b Version -

Rstinstruments ≫ Dt2306 Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2306 Version -

Rstinstruments ≫ Dt2350 Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2350 Version -

Rstinstruments ≫ Dt2485 Firmware Version 1.19.4.0

Rstinstruments ≫ Dt2485 Version -

Rstinstruments ≫ Dt4205 Firmware Version 1.19.4.0

Rstinstruments ≫ Dt4205 Version -

Rstinstruments ≫ Dtsaa Firmware Version 1.19.4.0

Rstinstruments ≫ Dtsaa Version -

Rstinstruments ≫ Ic6560 Firmware Version 1.19.4.0

Rstinstruments ≫ Ic6560 Version -

Rstinstruments ≫ Ic6660 Firmware Version 1.19.4.0

Rstinstruments ≫ Ic6660 Version -

Rstinstruments ≫ Mtcm Firmware Version 1.19.4.0

Rstinstruments ≫ Mtcm Version -

Rstinstruments ≫ Gaa2820 Firmware Version 1.19.4.0

Rstinstruments ≫ Gaa2820 Version -

Rstinstruments ≫ Rtu Firmware Version 1.19.4.0

Rstinstruments ≫ Rtu Version -

Rstinstruments ≫ Mems Tilt Meter Firmware Version 1.20.1

Rstinstruments ≫ Mems Tilt Meter Version -

Rstinstruments ≫ Portable Tilt Meter Firmware Version 1.20.1

Rstinstruments ≫ Portable Tilt Meter Version -

Rstinstruments ≫ Vw2106 Firmware Version -

Rstinstruments ≫ Vw2106 Version -

Rstinstruments ≫ Th2016 Firmware Version 1.4.0.2

Rstinstruments ≫ Th2016 Version -

Rstinstruments ≫ Th2016b Firmware Version 1.4.0.2

Rstinstruments ≫ Th2016b Version -

Rstinstruments ≫ Ma7 Firmware Version 1.4.0.2

Rstinstruments ≫ Ma7 Version -

Rstinstruments ≫ Qb120 Firmware Version 1.4.0.2

Rstinstruments ≫ Qb120 Version -

Rstinstruments ≫ Sg350 Firmware Version 1.4.0.2

Rstinstruments ≫ Sg350 Version -

Rstinstruments ≫ Ir420 Firmware Version 1.4.0.2

Rstinstruments ≫ Ir420 Version -

Rstinstruments ≫ Lp100 Firmware Version 1.4.0.2

Rstinstruments ≫ Lp100 Version -

Rstinstruments ≫ C109 Firmware Version 1.4.0.2

Rstinstruments ≫ C109 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.98%	0.786

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	5.1	4.9	6.4	AV:N/AC:H/Au:N/C:P/I:P/A:P

CWE-494 Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

https://gerr.re/posts/cve-2022-27438/

Third Party Advisory

Exploit

https://www.advancedinstaller.com/security-updates-auto-updater.html

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-27438

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-27438

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-27438

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-27438