csirt@kutim:~/threat-intel/cve/CVE-2022-27438

Katalog CVE

CVSS 8.1 · High EPSS 2,0%

Kerentanan Download of Code Without Integrity Check pada caphyon advanced installer, 3cx call flow designer +58 lainnya. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

Rincian

Terbit di NVD
6 Juni 2022
Terakhir diubah
9 Juli 2026
Status NVD
Modified
CVSS 3.1
8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-494: Download of Code Without Integrity Check
EPSS (30 hari)
2,0% peluang dieksploitasi; lebih tinggi dari 79,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
caphyon advanced installer Semua versi sebelum 19.4
3cx call flow designer Versi 18.2.13
3cx crm template generator Versi 2.1.23
boom boomtv streamer portal Versi 2.2.1
codesector direct folders Versi 4.0
codesector teracopy Versi 3.8.5
emeditor emeditor Versi 21.3.0
flamory flamory Versi 4.2.19.0
freesnippingtool free snipping tool Versi 5.6.0.0
fxsound fxsound Versi 1.1.12.0
gainedge better explorer Versi 2020.3.15.1304
gamecaster gamecaster Versi 4.0.2109.2802
getmailbird mailbird Versi 2.9.50.0
guzogo guzogo Versi 1.0.5.0
honeygain honeygain Versi 0.10.7.0
jki vi package manager Versi 21.1.2754
jpsoft take command Versi 28.2.18
krylack archive password recovery Versi 3.70.69
krylack asterisks password decryptor Versi 3.31.107
krylack burning suite Versi 1.20.05
krylack rar password recovery Versi 3.70.69
krylack volume serial number editor Versi 2.02.34
krylack zip password recovery Versi 3.70.69
moonsoftware password agent Versi 20.10.1
nefarius scptoolkit Versi 1.6.238.16010
plagiarismcheckerx plagiarism checker x Versi 8.0.6
prusa3d prusaslicer Versi 2.4.2
realdefense mycleanid Versi 4.1.4
realdefense mycleanpc Versi 4.0.2
realdefense mypasslock Versi 1.9.6
rovio angry birds space Versi 1.4.1
rovio bad piggies Versi 1.3.0
synaptics displaylink usb graphics Semua versi sebelum 10.3.6400.0
urban-vpn urban vpn Versi 2.2.5
vigem vigembus driver Versi 1.16.116
vpnhood vpnhood Versi 2.4.299
vrdesktop virtual desktop streamer Versi 1.20.16
xsplit xsplit express video editor Versi 3.0.2001.801
rstinstruments vw0420 firmware Versi 1.33.0
rstinstruments inclinalysis digital inclinometer Versi 2.48.9
rstinstruments ipi utility Versi 1.05.0
rstinstruments rstar rtu host Versi 1.33.0
rstinstruments dt2011 firmware Versi 1.19.4.0
rstinstruments dt2011b firmware Versi 1.19.4.0
rstinstruments dt2040 firmware Versi 1.19.4.0
rstinstruments dt2050 firmware Versi 1.19.4.0
rstinstruments dt2050b firmware Versi 1.19.4.0
rstinstruments dt2055b firmware Versi 1.19.4.0
rstinstruments dt2306 firmware Versi 1.19.4.0
rstinstruments dt2350 firmware Versi 1.19.4.0
rstinstruments dt2485 firmware Versi 1.19.4.0
rstinstruments dt4205 firmware Versi 1.19.4.0
rstinstruments dtsaa firmware Versi 1.19.4.0
rstinstruments ic6560 firmware Versi 1.19.4.0
rstinstruments ic6660 firmware Versi 1.19.4.0
rstinstruments dtl201b/2b firmware Versi 1.19.4.0
rstinstruments mtcm firmware Versi 1.19.4.0
rstinstruments gaa2820 firmware Versi 1.19.4.0
rstinstruments rtu firmware Versi 1.19.4.0
rstinstruments mems tilt meter firmware Versi 1.20.1

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 70 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.