8.1
CVSSv3

CVE-2022-27438

Published: 06/06/2022 Updated: 28/04/2023
CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9
CVSS v3 Base Score: 8.1 | Impact Score: 5.9 | Exploitability Score: 2.2
VMScore: 454
Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Vulnerability Summary

Caphyon Ltd Advanced Installer 19.3 and previous versions and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

caphyon advanced installer

realdefense mypasslock 1.9.6

realdefense mycleanpc 4.0.2

realdefense mycleanid 4.1.4

prusa3d prusaslicer 2.4.2

plagiarismcheckerx plagiarism checker x 8.0.6

vigem vigembus driver 1.16.116

nefarius scptoolkit 1.6.238.16010

moonsoftware password agent 20.10.1

getmailbird mailbird 2.9.50.0

krylack burning suite 1.20.05

krylack rar password recovery 3.70.69

krylack volume serial number editor 2.02.34

krylack zip password recovery 3.70.69

krylack asterisks password decryptor 3.31.107

krylack archive password recovery 3.70.69

jpsoft take command 28.2.18

jki vi package manager 21.1.2754

honeygain honeygain 0.10.7.0

guzogo guzogo 1.0.5.0

gamecaster gamecaster 4.0.2109.2802

gainedge better explorer 2020.3.15.1304

fxsound fxsound 1.1.12.0

freesnippingtool free snipping tool 5.6.0.0

flamory flamory 4.2.19.0

emeditor emeditor 21.3.0

codesector direct folders 4.0

boom boomtv streamer portal 2.2.1

codesector teracopy 3.8.5

3cx crm template generator 2.1.23

3cx call flow designer 18.2.13

vpnhood vpnhood 2.4.299

vrdesktop virtual desktop streamer 1.20.16

urban-vpn urban vpn 2.2.5

xsplit xsplit express video editor 3.0.2001.801

rovio bad piggies 1.3.0

rovio angry birds space 1.4.1

synaptics displaylink usb graphics

rstinstruments vw0420 firmware 1.33.0

rstinstruments rstar rtu host 1.33.0

rstinstruments ipi utility 1.05.0

rstinstruments inclinalysis digital inclinometer 2.48.9

rstinstruments dt2011 firmware 1.19.4.0

rstinstruments dt2011b firmware 1.19.4.0

rstinstruments dt2040 firmware 1.19.4.0

rstinstruments dt2050 firmware 1.19.4.0

rstinstruments dt2050b firmware 1.19.4.0

rstinstruments dt2055b firmware 1.19.4.0

rstinstruments dt2306 firmware 1.19.4.0

rstinstruments dt2350 firmware 1.19.4.0

rstinstruments dt2485 firmware 1.19.4.0

rstinstruments dt4205 firmware 1.19.4.0

rstinstruments dtsaa firmware 1.19.4.0

rstinstruments ic6560 firmware 1.19.4.0

rstinstruments ic6660 firmware 1.19.4.0

rstinstruments dtl201b/2b firmware 1.19.4.0

rstinstruments mtcm firmware 1.19.4.0

rstinstruments gaa2820 firmware 1.19.4.0

rstinstruments rtu firmware 1.19.4.0

rstinstruments mems tilt meter firmware 1.20.1

rstinstruments portable tilt meter firmware 1.20.1

rstinstruments vw2106 firmware -

rstinstruments th2016 firmware 1.4.0.2

rstinstruments th2016b firmware 1.4.0.2

rstinstruments ma7 firmware 1.4.0.2

rstinstruments qb120 firmware 1.4.0.2

rstinstruments sg350 firmware 1.4.0.2

rstinstruments ir420 firmware 1.4.0.2

rstinstruments lp100 firmware 1.4.0.2

rstinstruments c109 firmware 1.4.0.2

Github Repositories

CVE-2022-27438 Caphyon Ltd Advanced Installer 193 "CustomDetection" Update Check Remote Code Execution Vulnerability Usage: python3 cve-2022-27438_pocpy Details in the report at gerrre Steps to reproduce For other affected products, you have to change the update server and update configuration filename These can often be found in the updater ini in the applic