CVE-2022-27438

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-27438
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

5.1 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://advanced.com Product
http://caphyon.com Product
https://gerr.re/posts/cve-2022-27438/ Exploit Third Party Advisory
https://www.advancedinstaller.com/security-updates-auto-updater.html Patch Vendor Advisory
http://advanced.com Product
http://caphyon.com Product
https://gerr.re/posts/cve-2022-27438/ Exploit Third Party Advisory
https://www.advancedinstaller.com/security-updates-auto-updater.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:caphyon:advanced_installer:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:3cx:call_flow_designer:18.2.13:*:*:*:*:*:*:*
cpe:2.3:a:3cx:crm_template_generator:2.1.23:*:*:*:*:*:*:*
cpe:2.3:a:boom:boomtv_streamer_portal:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:codesector:direct_folders:4.0:*:*:*:*:*:*:*
cpe:2.3:a:codesector:teracopy:3.8.5:*:*:*:*:*:*:*
cpe:2.3:a:emeditor:emeditor:21.3.0:*:*:*:*:*:*:*
cpe:2.3:a:flamory:flamory:4.2.19.0:*:*:*:*:*:*:*
cpe:2.3:a:freesnippingtool:free_snipping_tool:5.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fxsound:fxsound:1.1.12.0:*:*:*:*:*:*:*
cpe:2.3:a:gainedge:better_explorer:2020.3.15.1304:*:*:*:*:*:*:*
cpe:2.3:a:gamecaster:gamecaster:4.0.2109.2802:*:*:*:*:*:*:*
cpe:2.3:a:getmailbird:mailbird:2.9.50.0:*:*:*:*:*:*:*
cpe:2.3:a:guzogo:guzogo:1.0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:honeygain:honeygain:0.10.7.0:*:*:*:*:windows:*:*
cpe:2.3:a:jki:vi_package_manager:21.1.2754:*:*:*:*:*:*:*
cpe:2.3:a:jpsoft:take_command:28.2.18:*:*:*:*:*:*:*
cpe:2.3:a:krylack:archive_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:krylack:asterisks_password_decryptor:3.31.107:*:*:*:*:*:*:*
cpe:2.3:a:krylack:burning_suite:1.20.05:*:*:*:*:*:*:*
cpe:2.3:a:krylack:rar_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:krylack:volume_serial_number_editor:2.02.34:*:*:*:*:*:*:*
cpe:2.3:a:krylack:zip_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:moonsoftware:password_agent:20.10.1:*:*:*:*:*:*:*
cpe:2.3:a:nefarius:scptoolkit:1.6.238.16010:*:*:*:*:*:*:*
cpe:2.3:a:plagiarismcheckerx:plagiarism_checker_x:8.0.6:*:*:*:*:*:*:*
cpe:2.3:a:prusa3d:prusaslicer:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mycleanid:4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mycleanpc:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mypasslock:1.9.6:*:*:*:*:*:*:*
cpe:2.3:a:rovio:angry_birds_space:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:rovio:bad_piggies:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:synaptics:displaylink_usb_graphics:*:*:*:*:*:windows:*:*
cpe:2.3:a:urban-vpn:urban_vpn:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:vigem:vigembus_driver:1.16.116:*:*:*:*:*:*:*
cpe:2.3:a:vpnhood:vpnhood:2.4.299:*:*:*:*:windows:*:*
cpe:2.3:a:vrdesktop:virtual_desktop_streamer:1.20.16:*:*:*:*:*:*:*
cpe:2.3:a:xsplit:xsplit_express_video_editor:3.0.2001.801:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:rstinstruments:vw0420_firmware:1.33.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:vw0420:-:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:rstinstruments:inclinalysis_digital_inclinometer:2.48.9:*:*:*:*:*:*:*
cpe:2.3:a:rstinstruments:ipi_utility:1.05.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:rstar_rtu_host:1.33.0:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:rstinstruments:dt2011_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2011:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:rstinstruments:dt2011b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2011b:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:rstinstruments:dt2040_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2040:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:rstinstruments:dt2050_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2050:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:rstinstruments:dt2050b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2050b:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:rstinstruments:dt2055b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2055b:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:rstinstruments:dt2306_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2306:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:rstinstruments:dt2350_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2350:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:rstinstruments:dt2485_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2485:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:rstinstruments:dt4205_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt4205:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:rstinstruments:dtsaa_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dtsaa:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:rstinstruments:ic6560_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ic6560:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:rstinstruments:ic6660_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ic6660:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:rstinstruments:dtl201b\/2b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dtl201b\/2b:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:rstinstruments:mtcm_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:mtcm:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:rstinstruments:gaa2820_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:gaa2820:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:rstinstruments:rtu_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:rtu:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:rstinstruments:mems_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:mems_tilt_meter:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:rstinstruments:portable_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:portable_tilt_meter:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:rstinstruments:vw2106_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:vw2106:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:rstinstruments:th2016_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:th2016:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:rstinstruments:th2016b_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:th2016b:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:rstinstruments:ma7_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ma7:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:rstinstruments:qb120_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:qb120:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:rstinstruments:sg350_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:sg350:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:rstinstruments:ir420_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ir420:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:rstinstruments:lp100_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:lp100:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:rstinstruments:c109_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:c109:-:*:*:*:*:*:*:*
History

21 Nov 2024, 06:55

Type Values Removed Values Added
References () http://advanced.com - Product () http://advanced.com - Product
References () http://caphyon.com - Product () http://caphyon.com - Product
References () https://gerr.re/posts/cve-2022-27438/ - Exploit, Third Party Advisory () https://gerr.re/posts/cve-2022-27438/ - Exploit, Third Party Advisory
References () https://www.advancedinstaller.com/security-updates-auto-updater.html - Patch, Vendor Advisory () https://www.advancedinstaller.com/security-updates-auto-updater.html - Patch, Vendor Advisory

28 Apr 2023, 19:03

Type Values Removed Values Added
CPE cpe:2.3:a:synaptics:displaylink_usb_graphics:*:*:*:*:*:windows:*:*

19 Oct 2022, 12:51

Type Values Removed Values Added
CPE cpe:2.3:h:rstinstruments:th2016b:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2011:-:*:*:*:*:*:*:*
cpe:2.3:a:3cx:crm_template_generator:2.1.23:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt4205_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:krylack:volume_serial_number_editor:2.02.34:*:*:*:*:*:*:*
cpe:2.3:a:gamecaster:gamecaster:4.0.2109.2802:*:*:*:*:*:*:*
cpe:2.3:a:plagiarismcheckerx:plagiarism_checker_x:8.0.6:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dtl201b\/2b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ic6560:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dtsaa_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2485:-:*:*:*:*:*:*:*
cpe:2.3:a:gainedge:better_explorer:2020.3.15.1304:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2485_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:lp100:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:th2016_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:honeygain:honeygain:0.10.7.0:*:*:*:*:windows:*:*
cpe:2.3:h:rstinstruments:dt2050b:-:*:*:*:*:*:*:*
cpe:2.3:a:krylack:rar_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2011b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:3cx:call_flow_designer:18.2.13:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:mtcm:-:*:*:*:*:*:*:*
cpe:2.3:a:urban-vpn:urban_vpn:2.2.5:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2040:-:*:*:*:*:*:*:*
cpe:2.3:a:freesnippingtool:free_snipping_tool:5.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:vigem:vigembus_driver:1.16.116:*:*:*:*:*:*:*
cpe:2.3:a:nefarius:scptoolkit:1.6.238.16010:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:c109:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:mems_tilt_meter:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:sg350_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dtsaa:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2350_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:ic6560_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:jpsoft:take_command:28.2.18:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2040_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:rtu:-:*:*:*:*:*:*:*
cpe:2.3:a:rovio:bad_piggies:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:vpnhood:vpnhood:2.4.299:*:*:*:*:windows:*:*
cpe:2.3:h:rstinstruments:dt2055b:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:th2016b_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dtl201b\/2b:-:*:*:*:*:*:*:*
cpe:2.3:a:prusa3d:prusaslicer:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:getmailbird:mailbird:2.9.50.0:*:*:*:*:*:*:*
cpe:2.3:a:emeditor:emeditor:21.3.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:rtu_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:portable_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
cpe:2.3:a:fxsound:fxsound:1.1.12.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:ma7_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2011b:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:lp100_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:c109_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:mtcm_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:vw0420:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:vw0420_firmware:1.33.0:*:*:*:*:*:*:*
cpe:2.3:a:guzogo:guzogo:1.0.5.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2050:-:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mycleanid:4.1.4:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:ir420_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:rstar_rtu_host:1.33.0:*:*:*:*:*:*:*
cpe:2.3:a:krylack:asterisks_password_decryptor:3.31.107:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2306_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:rstinstruments:inclinalysis_digital_inclinometer:2.48.9:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2350:-:*:*:*:*:*:*:*
cpe:2.3:a:krylack:archive_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:rstinstruments:ipi_utility:1.05.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2050b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:vrdesktop:virtual_desktop_streamer:1.20.16:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2055b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mypasslock:1.9.6:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ic6660:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:portable_tilt_meter:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:th2016:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:vw2106_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:vw2106:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:ic6660_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:xsplit:xsplit_express_video_editor:3.0.2001.801:*:*:*:*:*:*:*
cpe:2.3:a:boom:boomtv_streamer_portal:2.2.1:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:mems_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2050_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:gaa2820_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:sg350:-:*:*:*:*:*:*:*
cpe:2.3:a:flamory:flamory:4.2.19.0:*:*:*:*:*:*:*
cpe:2.3:a:rovio:angry_birds_space:1.4.1:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2011_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:jki:vi_package_manager:21.1.2754:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:qb120:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:gaa2820:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ir420:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2306:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:qb120_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:moonsoftware:password_agent:20.10.1:*:*:*:*:*:*:*
cpe:2.3:a:krylack:zip_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:krylack:burning_suite:1.20.05:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt4205:-:*:*:*:*:*:*:*
cpe:2.3:a:codesector:direct_folders:4.0:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mycleanpc:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:codesector:teracopy:3.8.5:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ma7:-:*:*:*:*:*:*:*

21 Jun 2022, 19:39

Type Values Removed Values Added
CWE CWE-494
CVSS v2 : unknown
v3 : unknown 		v2 : 5.1
v3 : 8.1
CPE cpe:2.3:a:caphyon:advanced_installer:*:*:*:*:*:*:*:*
References (MISC) https://www.advancedinstaller.com/security-updates-auto-updater.html - (MISC) https://www.advancedinstaller.com/security-updates-auto-updater.html - Patch, Vendor Advisory
References (MISC) https://gerr.re/posts/cve-2022-27438/ - (MISC) https://gerr.re/posts/cve-2022-27438/ - Exploit, Third Party Advisory
References (MISC) http://advanced.com - (MISC) http://advanced.com - Product
References (MISC) http://caphyon.com - (MISC) http://caphyon.com - Product

14 Jun 2022, 16:15

Type Values Removed Values Added
References
  • (MISC) https://www.advancedinstaller.com/security-updates-auto-updater.html -
Summary Caphyon Ltd Advanced Installer 19.2 was discovered to contain a remote code execution (RCE) vulnerability via the Update Check function. Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

06 Jun 2022, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-06-06 23:15

Updated : 2024-11-21 06:55

NVD link : CVE-2022-27438

Mitre link : CVE-2022-27438

CVE.ORG link : CVE-2022-27438

JSON object : View

Products Affected

jpsoft

  • take_command

flamory

  • flamory

rstinstruments

  • dt4205_firmware
  • ipi_utility
  • dt2040_firmware
  • dt2011
  • c109_firmware
  • dtl201b\/2b
  • dt2050b
  • vw2106
  • ic6560
  • dt2011_firmware
  • rstar_rtu_host
  • dtsaa_firmware
  • mtcm
  • ic6560_firmware
  • lp100_firmware
  • dt2050b_firmware
  • inclinalysis_digital_inclinometer
  • dt2040
  • dt2050
  • qb120
  • ma7_firmware
  • dt2485
  • dt2055b_firmware
  • rtu_firmware
  • vw0420
  • dt2050_firmware
  • ir420_firmware
  • ma7
  • dt2055b
  • dtsaa
  • th2016b_firmware
  • ic6660
  • ic6660_firmware
  • vw0420_firmware
  • qb120_firmware
  • th2016_firmware
  • portable_tilt_meter
  • th2016b
  • dt4205
  • portable_tilt_meter_firmware
  • dt2485_firmware
  • mtcm_firmware
  • gaa2820
  • th2016
  • ir420
  • gaa2820_firmware
  • dt2011b_firmware
  • mems_tilt_meter
  • c109
  • dt2306
  • dt2350
  • sg350_firmware
  • dt2011b
  • dt2350_firmware
  • lp100
  • dtl201b\/2b_firmware
  • dt2306_firmware
  • sg350
  • rtu
  • mems_tilt_meter_firmware
  • vw2106_firmware

urban-vpn

  • urban_vpn

emeditor

  • emeditor

krylack

  • rar_password_recovery
  • zip_password_recovery
  • volume_serial_number_editor
  • burning_suite
  • archive_password_recovery
  • asterisks_password_decryptor

jki

  • vi_package_manager

realdefense

  • mycleanid
  • mycleanpc
  • mypasslock

rovio

  • bad_piggies
  • angry_birds_space

gainedge

  • better_explorer

caphyon

  • advanced_installer

fxsound

  • fxsound

vpnhood

  • vpnhood

codesector

  • direct_folders
  • teracopy

vigem

  • vigembus_driver

vrdesktop

  • virtual_desktop_streamer

getmailbird

  • mailbird

freesnippingtool

  • free_snipping_tool

plagiarismcheckerx

  • plagiarism_checker_x

honeygain

  • honeygain

guzogo

  • guzogo

3cx

  • call_flow_designer
  • crm_template_generator

nefarius

  • scptoolkit

xsplit

  • xsplit_express_video_editor

gamecaster

  • gamecaster

synaptics

  • displaylink_usb_graphics

boom

  • boomtv_streamer_portal

moonsoftware

  • password_agent

prusa3d

  • prusaslicer
CWE
CWE-494

Download of Code Without Integrity Check