CVE-2022-27438: High severity Caphyon Advanced Installer vulnerability

Published Jun 6, 2022
·
Updated

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

Affected Software

157 affected components
Caphyon Advanced Installer<19.4
3CX Call Flow Designer=18.2.13
3CX Crm Template Generator=2.1.23
Boom Boomtv Streamer Portal=2.2.1
Codesector Direct Folders=4.0
Codesector Teracopy=3.8.5
Emeditor Emeditor=21.3.0
Flamory Flamory=4.2.19.0
Freesnippingtool Free Snipping Tool=5.6.0.0
Fxsound Fxsound=1.1.12.0
Gainedge Better Explorer=2020.3.15.1304
Gamecaster Gamecaster=4.0.2109.2802
Getmailbird Mailbird=2.9.50.0
Guzogo Guzogo=1.0.5.0
Honeygain Honeygain Windows=0.10.7.0
Jki Vi Package Manager=21.1.2754
Jpsoft Take Command=28.2.18
Krylack Archive Password Recovery=3.70.69
Krylack Asterisks Password Decryptor=3.31.107
Krylack Burning Suite=1.20.05
Krylack Rar Password Recovery=3.70.69
Krylack Volume Serial Number Editor=2.02.34
Krylack Zip Password Recovery=3.70.69
Moonsoftware Password Agent=20.10.1
Nefarius Scptoolkit=1.6.238.16010
Plagiarismcheckerx Plagiarism Checker X=8.0.6
Prusa3d Prusaslicer=2.4.2
RealDefense Mycleanid=4.1.4
RealDefense Mycleanpc=4.0.2
RealDefense Mypasslock=1.9.6
Rovio Angry Birds Space=1.4.1
Rovio Bad Piggies=1.3.0
Synaptics Displaylink Usb Graphics Windows<10.3.6400.0
Urban-vpn Urban Vpn=2.2.5
Vigem Vigembus Driver=1.16.116
Vpnhood Vpnhood Windows=2.4.299
Vrdesktop Virtual Desktop Streamer=1.20.16
Xsplit Xsplit Express Video Editor=3.0.2001.801
Rstinstruments Vw0420 Firmware=1.33.0
Rstinstruments Vw0420
Rstinstruments Inclinalysis Digital Inclinometer=2.48.9
Rstinstruments Ipi Utility=1.05.0
Rstinstruments Rstar Rtu Host=1.33.0
Rstinstruments Dt2011 Firmware=1.19.4.0
Rstinstruments Dt2011
Rstinstruments Dt2011b Firmware=1.19.4.0
Rstinstruments Dt2011b
Rstinstruments Dt2040 Firmware=1.19.4.0
Rstinstruments Dt2040
Rstinstruments Dt2050 Firmware=1.19.4.0
Rstinstruments Dt2050
Rstinstruments Dt2050b Firmware=1.19.4.0
Rstinstruments Dt2050b
Rstinstruments Dt2055b Firmware=1.19.4.0
Rstinstruments Dt2055b
Rstinstruments Dt2306 Firmware=1.19.4.0
Rstinstruments Dt2306
Rstinstruments Dt2350 Firmware=1.19.4.0
Rstinstruments Dt2350
Rstinstruments Dt2485 Firmware=1.19.4.0
Rstinstruments Dt2485
Rstinstruments Dt4205 Firmware=1.19.4.0
Rstinstruments Dt4205
Rstinstruments Dtsaa Firmware=1.19.4.0
Rstinstruments Dtsaa
Rstinstruments Ic6560 Firmware=1.19.4.0
Rstinstruments Ic6560
Rstinstruments Ic6660 Firmware=1.19.4.0
Rstinstruments Ic6660
Rstinstruments Dtl201b\/2b Firmware=1.19.4.0
Rstinstruments Dtl201b\/2b
Rstinstruments Mtcm Firmware=1.19.4.0
Rstinstruments Mtcm
Rstinstruments Gaa2820 Firmware=1.19.4.0
Rstinstruments Gaa2820
Rstinstruments Rtu Firmware=1.19.4.0
Rstinstruments Rtu
Rstinstruments Mems Tilt Meter Firmware=1.20.1
Rstinstruments Mems Tilt Meter
Rstinstruments Portable Tilt Meter Firmware=1.20.1
Rstinstruments Portable Tilt Meter
Rstinstruments Vw2106 Firmware
Rstinstruments Vw2106
Rstinstruments Th2016 Firmware=1.4.0.2
Rstinstruments Th2016
Rstinstruments Th2016b Firmware=1.4.0.2
Rstinstruments Th2016b
Rstinstruments Ma7 Firmware=1.4.0.2
Rstinstruments Ma7
Rstinstruments Qb120 Firmware=1.4.0.2
Rstinstruments Qb120
Rstinstruments Sg350 Firmware=1.4.0.2
Rstinstruments Sg350
Rstinstruments Ir420 Firmware=1.4.0.2
Rstinstruments Ir420
Rstinstruments Lp100 Firmware=1.4.0.2
Rstinstruments Lp100
Rstinstruments C109 Firmware=1.4.0.2
Rstinstruments C109
All of the following
Rstinstruments Vw0420 Firmware=1.33.0
Rstinstruments Vw0420
All of the following
Rstinstruments Dt2011 Firmware=1.19.4.0
Rstinstruments Dt2011
All of the following
Rstinstruments Dt2011b Firmware=1.19.4.0
Rstinstruments Dt2011b
All of the following
Rstinstruments Dt2040 Firmware=1.19.4.0
Rstinstruments Dt2040
All of the following
Rstinstruments Dt2050 Firmware=1.19.4.0
Rstinstruments Dt2050
All of the following
Rstinstruments Dt2050b Firmware=1.19.4.0
Rstinstruments Dt2050b
All of the following
Rstinstruments Dt2055b Firmware=1.19.4.0
Rstinstruments Dt2055b
All of the following
Rstinstruments Dt2306 Firmware=1.19.4.0
Rstinstruments Dt2306
All of the following
Rstinstruments Dt2350 Firmware=1.19.4.0
Rstinstruments Dt2350
All of the following
Rstinstruments Dt2485 Firmware=1.19.4.0
Rstinstruments Dt2485
All of the following
Rstinstruments Dt4205 Firmware=1.19.4.0
Rstinstruments Dt4205
All of the following
Rstinstruments Dtsaa Firmware=1.19.4.0
Rstinstruments Dtsaa
All of the following
Rstinstruments Ic6560 Firmware=1.19.4.0
Rstinstruments Ic6560
All of the following
Rstinstruments Ic6660 Firmware=1.19.4.0
Rstinstruments Ic6660
All of the following
Rstinstruments Dtl201b\/2b Firmware=1.19.4.0
Rstinstruments Dtl201b\/2b
All of the following
Rstinstruments Mtcm Firmware=1.19.4.0
Rstinstruments Mtcm
All of the following
Rstinstruments Gaa2820 Firmware=1.19.4.0
Rstinstruments Gaa2820
All of the following
Rstinstruments Rtu Firmware=1.19.4.0
Rstinstruments Rtu
All of the following
Rstinstruments Mems Tilt Meter Firmware=1.20.1
Rstinstruments Mems Tilt Meter
All of the following
Rstinstruments Portable Tilt Meter Firmware=1.20.1
Rstinstruments Portable Tilt Meter
All of the following
Rstinstruments Vw2106 Firmware
Rstinstruments Vw2106
All of the following
Rstinstruments Th2016 Firmware=1.4.0.2
Rstinstruments Th2016
All of the following
Rstinstruments Th2016b Firmware=1.4.0.2
Rstinstruments Th2016b
All of the following
Rstinstruments Ma7 Firmware=1.4.0.2
Rstinstruments Ma7
All of the following
Rstinstruments Qb120 Firmware=1.4.0.2
Rstinstruments Qb120
All of the following
Rstinstruments Sg350 Firmware=1.4.0.2
Rstinstruments Sg350
All of the following
Rstinstruments Ir420 Firmware=1.4.0.2
Rstinstruments Ir420
All of the following
Rstinstruments Lp100 Firmware=1.4.0.2
Rstinstruments Lp100
All of the following
Rstinstruments C109 Firmware=1.4.0.2
Rstinstruments C109

Event History

Jun 6, 2022
CVE Published
via MITRE·10:21 PM
Data Sourced
via MITRE·10:21 PM
Description
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-27438?

CVE-2022-27438 has been assigned a CVSS severity score that indicates it is a critical remote code execution vulnerability.

2

How do I fix CVE-2022-27438?

To mitigate CVE-2022-27438, users should upgrade to Advanced Installer version 19.4 or later.

3

What software is affected by CVE-2022-27438?

CVE-2022-27438 affects Caphyon Advanced Installer versions 19.3 and earlier, along with several other products using the Advanced Updater functionality.

4

What kind of vulnerability is CVE-2022-27438?

CVE-2022-27438 is a remote code execution vulnerability that allows potential attackers to execute arbitrary code on the affected systems.

5

How can CVE-2022-27438 be exploited?

Exploitation of CVE-2022-27438 requires a user to start the update check function within an affected application.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203