Published: 30/03/2023 Updated: 10/04/2023

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 0

3CX DesktopApp up to and including 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX DesktopApp Electron macOS application.

Vulnerable Product	Search on Vulmon	Subscribe to Product
3cx 3cx 18.12.407
3cx 3cx 18.12.416
3cx 3cx 18.12.402
3cx 3cx 18.11.1213

3CXremove This is a powershell project to remove the 3CXDesktopApp related to the CVE-2023-29059 CVE-2023-29059 : ("3CX DesktopApp through 1812416 has embedded malicious code, as exploited in the wild in March 2023 This affects versions 1812407 and 1812416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18111213, 1812402, 18

NVD-CWE-noinfo https://cwe.mitre.org/data/definitions/506.html https://www.3cx.com/blog/news/desktopapp-security-alert/https://www.fortinet.com/blog/threat-research/3cx-desktop-app-compromised https://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threats https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/https://nvd.nist.gov https://github.com/Narco360/3CXremove

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-29059

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect