Vulnerability in Caphyon Advanced Installer
CVSS Skor
8.1
EPSS İhtimal
%2.0
Risk Skoru
0.2
Yayın
4 yıl önce
Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.
Envanterimdeki Etkisi
Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.
Oturum kontrol ediliyor…
Zafiyet Açıklaması
DayBreach CVE AI Araştırması
CVE-2022-27438 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.
IMPACT — Etkilenen Ürünler ve Yazılımlar
Affected Products
The following products are affected by CVE-2022-27438 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.
| ID | VENDOR | PRODUCT | ACTION |
|---|---|---|---|
| 1 | caphyon | advanced installer | İncele |
| 2 | 3cx | call flow designer | İncele |
| 3 | 3cx | crm template generator | İncele |
| 4 | boom | boomtv streamer portal | İncele |
| 5 | codesector | direct folders | İncele |
| 6 | codesector | teracopy | İncele |
| 7 | emeditor | emeditor | İncele |
| 8 | flamory | flamory | İncele |
| 9 | freesnippingtool | free snipping tool | İncele |
| 10 | fxsound | fxsound | İncele |
| 11 | gainedge | better explorer | İncele |
| 12 | gamecaster | gamecaster | İncele |
| 13 | getmailbird | mailbird | İncele |
| 14 | guzogo | guzogo | İncele |
| 15 | honeygain | honeygain | İncele |
| 16 | jki | vi package manager | İncele |
| 17 | jpsoft | take command | İncele |
| 18 | krylack | archive password recovery | İncele |
| 19 | krylack | asterisks password decryptor | İncele |
| 20 | krylack | burning suite | İncele |
| 21 | krylack | rar password recovery | İncele |
| 22 | krylack | volume serial number editor | İncele |
| 23 | krylack | zip password recovery | İncele |
| 24 | moonsoftware | password agent | İncele |
| 25 | nefarius | scptoolkit | İncele |
| 26 | plagiarismcheckerx | plagiarism checker x | İncele |
| 27 | prusa3d | prusaslicer | İncele |
| 28 | realdefense | mycleanid | İncele |
| 29 | realdefense | mycleanpc | İncele |
| 30 | realdefense | mypasslock | İncele |
| 31 | rovio | angry birds space | İncele |
| 32 | rovio | bad piggies | İncele |
| 33 | synaptics | displaylink usb graphics | İncele |
| 34 | urban-vpn | urban vpn | İncele |
| 35 | vigem | vigembus driver | İncele |
| 36 | vpnhood | vpnhood | İncele |
| 37 | vrdesktop | virtual desktop streamer | İncele |
| 38 | xsplit | xsplit express video editor | İncele |
| 39 | rstinstruments | vw0420 firmware | İncele |
| 40 | rstinstruments | vw0420 | İncele |
| 41 | rstinstruments | inclinalysis digital inclinometer | İncele |
| 42 | rstinstruments | ipi utility | İncele |
| 43 | rstinstruments | rstar rtu host | İncele |
| 44 | rstinstruments | dt2011 firmware | İncele |
| 45 | rstinstruments | dt2011 | İncele |
| 46 | rstinstruments | dt2011b firmware | İncele |
| 47 | rstinstruments | dt2011b | İncele |
| 48 | rstinstruments | dt2040 firmware | İncele |
| 49 | rstinstruments | dt2040 | İncele |
| 50 | rstinstruments | dt2050 firmware | İncele |
| 51 | rstinstruments | dt2050 | İncele |
| 52 | rstinstruments | dt2050b firmware | İncele |
| 53 | rstinstruments | dt2050b | İncele |
| 54 | rstinstruments | dt2055b firmware | İncele |
| 55 | rstinstruments | dt2055b | İncele |
| 56 | rstinstruments | dt2306 firmware | İncele |
| 57 | rstinstruments | dt2306 | İncele |
| 58 | rstinstruments | dt2350 firmware | İncele |
| 59 | rstinstruments | dt2350 | İncele |
| 60 | rstinstruments | dt2485 firmware | İncele |
| 61 | rstinstruments | dt2485 | İncele |
| 62 | rstinstruments | dt4205 firmware | İncele |
| 63 | rstinstruments | dt4205 | İncele |
| 64 | rstinstruments | dtsaa firmware | İncele |
| 65 | rstinstruments | dtsaa | İncele |
| 66 | rstinstruments | ic6560 firmware | İncele |
| 67 | rstinstruments | ic6560 | İncele |
| 68 | rstinstruments | ic6660 firmware | İncele |
| 69 | rstinstruments | ic6660 | İncele |
| 70 | rstinstruments | dtl201b/2b firmware | İncele |
| 71 | rstinstruments | dtl201b/2b | İncele |
| 72 | rstinstruments | mtcm firmware | İncele |
| 73 | rstinstruments | mtcm | İncele |
| 74 | rstinstruments | gaa2820 firmware | İncele |
| 75 | rstinstruments | gaa2820 | İncele |
| 76 | rstinstruments | rtu firmware | İncele |
| 77 | rstinstruments | rtu | İncele |
| 78 | rstinstruments | mems tilt meter firmware | İncele |
| 79 | rstinstruments | mems tilt meter | İncele |
| 80 | rstinstruments | portable tilt meter firmware | İncele |
| 81 | rstinstruments | portable tilt meter | İncele |
| 82 | rstinstruments | vw2106 firmware | İncele |
| 83 | rstinstruments | vw2106 | İncele |
| 84 | rstinstruments | th2016 firmware | İncele |
| 85 | rstinstruments | th2016 | İncele |
| 86 | rstinstruments | th2016b firmware | İncele |
| 87 | rstinstruments | th2016b | İncele |
| 88 | rstinstruments | ma7 firmware | İncele |
| 89 | rstinstruments | ma7 | İncele |
| 90 | rstinstruments | qb120 firmware | İncele |
| 91 | rstinstruments | qb120 | İncele |
| 92 | rstinstruments | sg350 firmware | İncele |
| 93 | rstinstruments | sg350 | İncele |
| 94 | rstinstruments | ir420 firmware | İncele |
| 95 | rstinstruments | ir420 | İncele |
| 96 | rstinstruments | lp100 firmware | İncele |
| 97 | rstinstruments | lp100 | İncele |
| 98 | rstinstruments | c109 firmware | İncele |
| 99 | rstinstruments | c109 | İncele |
RED HAT CSAF/VEX — Ürün Etki Kontrolü
SCORING — CVSS Çoklu Kaynak Skoru
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 8.1 | CVSS V31 | HIGH | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD |
| 5.1 | CVSS V2 | — | AV:N/AC:H/Au:N/C:P/I:P/A:P | NVD |
Yama ve İyileştirme Rehberi (Solution)
Solution & Remediation Advisory
2 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.
Public exploit ve aktif sömürü durumu
Doğrulanmış exploit istihbaratı
CVE-2022-27438 için veritabanında 1 public PoC/exploit kaynağı bulunuyor. Doğrudan kaynak bağlantıları için Public Exploits sekmesini açın.
Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-27438 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-27438 weaknesses.
Saldırı Vektörü ve Erişilebilirlik Karakteristiği
Resmi Kaynaklar ve Danışma Bültenleri
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2022-27438"