CVE-2022-27438

PoC —

CVSS 3.1

8.1 high

EPSS

2%p79

Published

Jun 6, 2022 (Jun 6, 2022)

Modified

Jul 9, 2026

Description

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

Vendors: caphyon 3cx boom codesector emeditor flamory freesnippingtool fxsound gainedge gamecaster getmailbird guzogo
Products: advanced installer, call flow designer, crm template generator, boomtv streamer portal, direct folders, teracopy, emeditor, flamory, free snipping tool, fxsound, better explorer, gamecaster
Weakness: CWE-494
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.