CVE-2021-45490

—

CVSS 3.1

9.1 critical

EPSS

1%p63

Published

Mar 28, 2022 (Mar 28, 2022)

Modified

Jun 17, 2026

Description

The client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for Android through 2022-03-17 lack SSL certificate validation.

Vendors: 3cx
Products: 3cx
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.