Skip to content
NewA calmer, faster ZeroHour

3CX Supply Chain Attack — Here's What We Know So Far

The Hacker Newsby @TheHackersNews ()4 min read2 · 1 read
Analyze CVE-2023-29059 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-29059
3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023
7.84%PoC ×4

From the original article

4 min read at thehackernews.com

Enterprise communications software maker 3CX on Thursday confirmed that multiple versions of its desktop app for Windows and macOS are affected by a supply chain attack . The version numbers include 18. 12.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.