high
8.1
CWE
494
Advisory Published
Updated

CVE-2022-27438

First published: Mon Jun 06 2022(Updated: )

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Caphyon Advanced Installer<19.4
3cx Call Flow Designer=18.2.13
3CX CRM Template Generator=2.1.23
Boom Boomtv Streamer Portal=2.2.1
Codesector Direct Folders=4.0
TeraCopy=3.8.5
VMware BOSH Editor=21.3.0
Olacabs Olamoney=4.2.19.0
Freesnippingtool Free Snipping Tool=5.6.0.0
Fxsound=1.1.12.0
Gainedge Better Explorer=2020.3.15.1304
Hazelcast Jet=4.0.2109.2802
Mailbird=2.9.50.0
Guzogo Guzogo=1.0.5.0
Honeygain=0.10.7.0
Jki Vi Package Manager=21.1.2754
Jpsoft Take Command=28.2.18
Krylack Archive Password Recovery=3.70.69
Krylack Asterisks Password Decryptor=3.31.107
Krylack Burning Suite=1.20.05
Krylack Rar Password Recovery=3.70.69
Krylack Volume Serial Number Editor=2.02.34
Krylack Zip Password Recovery=3.70.69
Moonsoftware Password Agent=20.10.1
Nefarius Scptoolkit=1.6.238.16010
Plagiarism Checker X=8.0.6
PrusaSlicer=2.4.2
Realdefense Mycleanid=4.1.4
MyCleanPC=4.0.2
RealDefense MyPassLock=1.9.6
Angry Birds Space=1.4.1
Rovio Bad Piggies=1.3.0
DisplayLink Graphics<10.3.6400.0
Urban VPN=2.2.5
Vigem Vigembus Driver=1.16.116
Vpnhood=2.4.299
Vrdesktop Virtual Desktop Streamer=1.20.16
Xsplit Xsplit Express Video Editor=3.0.2001.801
Rstinstruments Vw0420 Firmware=1.33.0
Rstinstruments Vw0420
RST Instruments Inclinalysis Digital Inclinometer=2.48.9
Rstinstruments Ipi Utility=1.05.0
Rstinstruments Rstar Rtu Host=1.33.0
Rstinstruments Dt2011 Firmware=1.19.4.0
Rstinstruments Dt2011 Firmware
Rstinstruments Dt2011b=1.19.4.0
Rstinstruments Dt2011 Firmware
Rstinstruments Dt2040 Firmware=1.19.4.0
Rstinstruments Dt2040 Firmware
Rstinstruments Dt2050b Firmware=1.19.4.0
Rstinstruments Dt2050b
Rstinstruments Dt2050 Firmware=1.19.4.0
Rstinstruments Dt2050b Firmware
Rstinstruments Dt2055b Firmware=1.19.4.0
Rstinstruments Dt2055b Firmware
Rstinstruments Dt2306 Firmware=1.19.4.0
Rstinstruments Dt2306 Firmware
RST Instruments DT2350=1.19.4.0
Rstinstruments Dt2350 Firmware
Rst Instruments Dt2485=1.19.4.0
Rstinstruments Dt2485 Firmware
Rstinstruments Dt4205 Firmware=1.19.4.0
RST Instruments DT4205
RST Instruments Dtsaa=1.19.4.0
RST Instruments Dtsaa
Rstinstruments Ic6560=1.19.4.0
Rstinstruments Ic6560 Firmware
Rstinstruments Ic6660 Firmware=1.19.4.0
Rstinstruments Ic6660 Firmware
Rstinstruments Dtl201b/2b Firmware=1.19.4.0
Rstinstruments Dtl201b/2b
Rstinstruments Mtcm=1.19.4.0
Rstinstruments Mtcm
Rstinstruments Gaa2820=1.19.4.0
Rstinstruments Gaa2820
Rstinstruments Rtu Firmware=1.19.4.0
Rstinstruments Rtu
Rstinstruments Mems Tilt Meter Firmware=1.20.1
Rstinstruments Mems Tilt Meter Firmware
Rstinstruments Portable Tilt Meter Firmware=1.20.1
Rstinstruments Portable Tilt Meter Firmware
Rstinstruments Vw2106 Firmware
Rstinstruments Vw2106 Firmware
Rstinstruments Th2016=1.4.0.2
Rstinstruments Th2016
Rstinstruments Th2016b Firmware=1.4.0.2
Rstinstruments Th2016b Firmware
Rstinstruments Ma7 Firmware=1.4.0.2
Mikafon MA7
Rstinstruments Qb120 Firmware=1.4.0.2
Rstinstruments Qb120 Firmware
Rstinstruments Sg350 Firmware=1.4.0.2
Rstinstruments Sg350 Firmware
Rstinstruments Ir420 Firmware=1.4.0.2
Rstinstruments IR420
Rstinstruments Lp100 Firmware=1.4.0.2
Rstinstruments Lp100 Firmware
Rstinstruments C109=1.4.0.2
Rstinstruments C109 Firmware

Remedy

https://www.advancedinstaller.com/security-updates-auto-updater.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2022-27438?

    CVE-2022-27438 has been assigned a CVSS severity score that indicates it is a critical remote code execution vulnerability.

  • How do I fix CVE-2022-27438?

    To mitigate CVE-2022-27438, users should upgrade to Advanced Installer version 19.4 or later.

  • What software is affected by CVE-2022-27438?

    CVE-2022-27438 affects Caphyon Advanced Installer versions 19.3 and earlier, along with several other products using the Advanced Updater functionality.

  • What kind of vulnerability is CVE-2022-27438?

    CVE-2022-27438 is a remote code execution vulnerability that allows potential attackers to execute arbitrary code on the affected systems.

  • How can CVE-2022-27438 be exploited?

    Exploitation of CVE-2022-27438 requires a user to start the update check function within an affected application.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203