CVE-2022-28005

Katalog CVE

CVSS 9.8 · Critical EPSS 8,3%

Kerentanan Insufficiently Protected Credentials pada 3cx. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse improperly secured access to arbitrary files on the server (via /Electron/download directory traversal in conjunction with a path component that uses backslash characters), leading to cleartext credential disclosure. Afterwards, the authenticated attacker is able to upload a file that overwrites a 3CX service binary, leading to Remote Code Execution as NT AUTHORITY\SYSTEM on Windows installations. NOTE: this issue exists because of an incomplete fix for CVE-2022-48482.

Rincian

Terbit di NVD

6 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

8,3% peluang dieksploitasi; lebih tinggi dari 94,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.3cx.com/blog/change-log/phone-system-change-log/ release notes · advisory vendor
• https://www.3cx.com/blog/releases/v18-security-hotfix/ release notes · advisory vendor
• https://www.3cx.com/blog/releases/v18-update-3-final/ release notes · advisory vendor
• https://medium.com/%40frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88