3cx: community verdicts

1 notable / known-exploited 3cx CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every 3cx CVE, see NVD ↗.

CVE-2022-27438HIGH 8.1Real · low riskEPSS 2%
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.