high
8.1
CWE
494
Advisory Published
Updated

CVE-2022-27438

First published: Mon Jun 06 2022(Updated: )

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Caphyon Advanced Installer<19.4
3cx Call Flow Designer=18.2.13
3cx Crm Template Generator=2.1.23
Boom Boomtv Streamer Portal=2.2.1
Codesector Direct Folders=4.0
Codesector Teracopy=3.8.5
Emeditor Emeditor=21.3.0
Flamory Flamory=4.2.19.0
Freesnippingtool Free Snipping Tool=5.6.0.0
Fxsound Fxsound=1.1.12.0
Gainedge Better Explorer=2020.3.15.1304
Gamecaster Gamecaster=4.0.2109.2802
Getmailbird Mailbird=2.9.50.0
Guzogo Guzogo=1.0.5.0
Honeygain Honeygain=0.10.7.0
Jki Vi Package Manager=21.1.2754
Jpsoft Take Command=28.2.18
Krylack Archive Password Recovery=3.70.69
Krylack Asterisks Password Decryptor=3.31.107
Krylack Burning Suite=1.20.05
Krylack Rar Password Recovery=3.70.69
Krylack Volume Serial Number Editor=2.02.34
Krylack Zip Password Recovery=3.70.69
Moonsoftware Password Agent=20.10.1
Nefarius Scptoolkit=1.6.238.16010
Plagiarismcheckerx Plagiarism Checker X=8.0.6
Prusa3d Prusaslicer=2.4.2
Realdefense Mycleanid=4.1.4
Realdefense Mycleanpc=4.0.2
Realdefense Mypasslock=1.9.6
Rovio Angry Birds Space=1.4.1
Rovio Bad Piggies=1.3.0
Synaptics Displaylink Usb Graphics<10.3.6400.0
Urban-vpn Urban Vpn=2.2.5
Vigem Vigembus Driver=1.16.116
Vpnhood Vpnhood=2.4.299
Vrdesktop Virtual Desktop Streamer=1.20.16
Xsplit Xsplit Express Video Editor=3.0.2001.801
Rstinstruments Vw0420 Firmware=1.33.0
Rstinstruments Vw0420
Rstinstruments Inclinalysis Digital Inclinometer=2.48.9
Rstinstruments Ipi Utility=1.05.0
Rstinstruments Rstar Rtu Host=1.33.0
Rstinstruments Dt2011 Firmware=1.19.4.0
Rstinstruments Dt2011
Rstinstruments Dt2011b Firmware=1.19.4.0
Rstinstruments Dt2011b
Rstinstruments Dt2040 Firmware=1.19.4.0
Rstinstruments Dt2040
Rstinstruments Dt2050 Firmware=1.19.4.0
Rstinstruments Dt2050
Rstinstruments Dt2050b Firmware=1.19.4.0
Rstinstruments Dt2050b
Rstinstruments Dt2055b Firmware=1.19.4.0
Rstinstruments Dt2055b
Rstinstruments Dt2306 Firmware=1.19.4.0
Rstinstruments Dt2306
Rstinstruments Dt2350 Firmware=1.19.4.0
Rstinstruments Dt2350
Rstinstruments Dt2485 Firmware=1.19.4.0
Rstinstruments Dt2485
Rstinstruments Dt4205 Firmware=1.19.4.0
Rstinstruments Dt4205
Rstinstruments Dtsaa Firmware=1.19.4.0
Rstinstruments Dtsaa
Rstinstruments Ic6560 Firmware=1.19.4.0
Rstinstruments Ic6560
Rstinstruments Ic6660 Firmware=1.19.4.0
Rstinstruments Ic6660
Rstinstruments Dtl201b\/2b Firmware=1.19.4.0
Rstinstruments Dtl201b\/2b
Rstinstruments Mtcm Firmware=1.19.4.0
Rstinstruments Mtcm
Rstinstruments Gaa2820 Firmware=1.19.4.0
Rstinstruments Gaa2820
Rstinstruments Rtu Firmware=1.19.4.0
Rstinstruments Rtu
Rstinstruments Mems Tilt Meter Firmware=1.20.1
Rstinstruments Mems Tilt Meter
Rstinstruments Portable Tilt Meter Firmware=1.20.1
Rstinstruments Portable Tilt Meter
Rstinstruments Vw2106 Firmware
Rstinstruments Vw2106
Rstinstruments Th2016 Firmware=1.4.0.2
Rstinstruments Th2016
Rstinstruments Th2016b Firmware=1.4.0.2
Rstinstruments Th2016b
Rstinstruments Ma7 Firmware=1.4.0.2
Rstinstruments Ma7
Rstinstruments Qb120 Firmware=1.4.0.2
Rstinstruments Qb120
Rstinstruments Sg350 Firmware=1.4.0.2
Rstinstruments Sg350
Rstinstruments Ir420 Firmware=1.4.0.2
Rstinstruments Ir420
Rstinstruments Lp100 Firmware=1.4.0.2
Rstinstruments Lp100
Rstinstruments C109 Firmware=1.4.0.2
Rstinstruments C109

Remedy

https://www.advancedinstaller.com/security-updates-auto-updater.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203