CVE-2023-29059

Katalog CVE

CVSS 7.8 · High EPSS 4,4%

Kerentanan pada 3cx. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX DesktopApp Electron macOS application.

Rincian

Terbit di NVD

30 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

4,4% peluang dieksploitasi; lebih tinggi dari 91,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.3cx.com/blog/news/desktopapp-security-alert/ advisory vendor
• https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/ exploit · deskripsi teknis · advisory pihak ketiga
• https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdeskt... exploit · advisory pihak ketiga
• https://www.fortinet.com/blog/threat-research/3cx-desktop-app-compromised exploit · advisory pihak ketiga
• https://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threats exploit · advisory pihak ketiga
• https://cwe.mitre.org/data/definitions/506.html deskripsi teknis