CVE-2022-27438

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-27438
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

5.1 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://advanced.com Product
http://caphyon.com Product
https://gerr.re/posts/cve-2022-27438/ Exploit Third Party Advisory
https://www.advancedinstaller.com/security-updates-auto-updater.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:caphyon:advanced_installer:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:3cx:call_flow_designer:18.2.13:*:*:*:*:*:*:*
cpe:2.3:a:3cx:crm_template_generator:2.1.23:*:*:*:*:*:*:*
cpe:2.3:a:boom:boomtv_streamer_portal:2.2.1:*:*:*:*:*:*:*
cpe:2.3:a:codesector:direct_folders:4.0:*:*:*:*:*:*:*
cpe:2.3:a:codesector:teracopy:3.8.5:*:*:*:*:*:*:*
cpe:2.3:a:emeditor:emeditor:21.3.0:*:*:*:*:*:*:*
cpe:2.3:a:flamory:flamory:4.2.19.0:*:*:*:*:*:*:*
cpe:2.3:a:freesnippingtool:free_snipping_tool:5.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:fxsound:fxsound:1.1.12.0:*:*:*:*:*:*:*
cpe:2.3:a:gainedge:better_explorer:2020.3.15.1304:*:*:*:*:*:*:*
cpe:2.3:a:gamecaster:gamecaster:4.0.2109.2802:*:*:*:*:*:*:*
cpe:2.3:a:getmailbird:mailbird:2.9.50.0:*:*:*:*:*:*:*
cpe:2.3:a:guzogo:guzogo:1.0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:honeygain:honeygain:0.10.7.0:*:*:*:*:windows:*:*
cpe:2.3:a:jki:vi_package_manager:21.1.2754:*:*:*:*:*:*:*
cpe:2.3:a:jpsoft:take_command:28.2.18:*:*:*:*:*:*:*
cpe:2.3:a:krylack:archive_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:krylack:asterisks_password_decryptor:3.31.107:*:*:*:*:*:*:*
cpe:2.3:a:krylack:burning_suite:1.20.05:*:*:*:*:*:*:*
cpe:2.3:a:krylack:rar_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:krylack:volume_serial_number_editor:2.02.34:*:*:*:*:*:*:*
cpe:2.3:a:krylack:zip_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:moonsoftware:password_agent:20.10.1:*:*:*:*:*:*:*
cpe:2.3:a:nefarius:scptoolkit:1.6.238.16010:*:*:*:*:*:*:*
cpe:2.3:a:plagiarismcheckerx:plagiarism_checker_x:8.0.6:*:*:*:*:*:*:*
cpe:2.3:a:prusa3d:prusaslicer:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mycleanid:4.1.4:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mycleanpc:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mypasslock:1.9.6:*:*:*:*:*:*:*
cpe:2.3:a:rovio:angry_birds_space:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:rovio:bad_piggies:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:synaptics:displaylink_usb_graphics:*:*:*:*:*:windows:*:*
cpe:2.3:a:urban-vpn:urban_vpn:2.2.5:*:*:*:*:*:*:*
cpe:2.3:a:vigem:vigembus_driver:1.16.116:*:*:*:*:*:*:*
cpe:2.3:a:vpnhood:vpnhood:2.4.299:*:*:*:*:windows:*:*
cpe:2.3:a:vrdesktop:virtual_desktop_streamer:1.20.16:*:*:*:*:*:*:*
cpe:2.3:a:xsplit:xsplit_express_video_editor:3.0.2001.801:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:rstinstruments:vw0420_firmware:1.33.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:vw0420:-:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:rstinstruments:inclinalysis_digital_inclinometer:2.48.9:*:*:*:*:*:*:*
cpe:2.3:a:rstinstruments:ipi_utility:1.05.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:rstar_rtu_host:1.33.0:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:rstinstruments:dt2011_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2011:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:rstinstruments:dt2011b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2011b:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:rstinstruments:dt2040_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2040:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:rstinstruments:dt2050_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2050:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:rstinstruments:dt2050b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2050b:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:rstinstruments:dt2055b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2055b:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:rstinstruments:dt2306_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2306:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:rstinstruments:dt2350_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2350:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:rstinstruments:dt2485_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2485:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:rstinstruments:dt4205_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt4205:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:rstinstruments:dtsaa_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dtsaa:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:rstinstruments:ic6560_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ic6560:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:rstinstruments:ic6660_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ic6660:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:rstinstruments:dtl201b\/2b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dtl201b\/2b:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:rstinstruments:mtcm_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:mtcm:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:rstinstruments:gaa2820_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:gaa2820:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:rstinstruments:rtu_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:rtu:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:rstinstruments:mems_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:mems_tilt_meter:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:rstinstruments:portable_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:portable_tilt_meter:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:rstinstruments:vw2106_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:vw2106:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:rstinstruments:th2016_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:th2016:-:*:*:*:*:*:*:*

Configuration 26 (hide)

AND
cpe:2.3:o:rstinstruments:th2016b_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:th2016b:-:*:*:*:*:*:*:*

Configuration 27 (hide)

AND
cpe:2.3:o:rstinstruments:ma7_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ma7:-:*:*:*:*:*:*:*

Configuration 28 (hide)

AND
cpe:2.3:o:rstinstruments:qb120_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:qb120:-:*:*:*:*:*:*:*

Configuration 29 (hide)

AND
cpe:2.3:o:rstinstruments:sg350_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:sg350:-:*:*:*:*:*:*:*

Configuration 30 (hide)

AND
cpe:2.3:o:rstinstruments:ir420_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ir420:-:*:*:*:*:*:*:*

Configuration 31 (hide)

AND
cpe:2.3:o:rstinstruments:lp100_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:lp100:-:*:*:*:*:*:*:*

Configuration 32 (hide)

AND
cpe:2.3:o:rstinstruments:c109_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:c109:-:*:*:*:*:*:*:*
History

28 Apr 2023, 19:03

Type Values Removed Values Added
First Time Synaptics
Synaptics displaylink Usb Graphics
CPE cpe:2.3:a:synaptics:displaylink_usb_graphics:*:*:*:*:*:windows:*:*

19 Oct 2022, 12:51

Type Values Removed Values Added
CPE cpe:2.3:a:3cx:call_flow_designer:18.2.13:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:mtcm:-:*:*:*:*:*:*:*
cpe:2.3:a:nefarius:scptoolkit:1.6.238.16010:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2306:-:*:*:*:*:*:*:*
cpe:2.3:a:vrdesktop:virtual_desktop_streamer:1.20.16:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:mtcm_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2050_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:gaa2820_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:codesector:teracopy:3.8.5:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2050b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2055b:-:*:*:*:*:*:*:*
cpe:2.3:a:krylack:volume_serial_number_editor:2.02.34:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt4205_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:freesnippingtool:free_snipping_tool:5.6.0.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2050b:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:qb120_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:3cx:crm_template_generator:2.1.23:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:vw2106:-:*:*:*:*:*:*:*
cpe:2.3:a:codesector:direct_folders:4.0:*:*:*:*:*:*:*
cpe:2.3:a:xsplit:xsplit_express_video_editor:3.0.2001.801:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:rtu_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2040:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2011:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:mems_tilt_meter:-:*:*:*:*:*:*:*
cpe:2.3:a:krylack:burning_suite:1.20.05:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mycleanid:4.1.4:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ic6560:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ir420:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:vw2106_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2040_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:sg350_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:krylack:rar_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:urban-vpn:urban_vpn:2.2.5:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:th2016:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:th2016_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:guzogo:guzogo:1.0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:prusa3d:prusaslicer:2.4.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dtsaa:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:vw0420:-:*:*:*:*:*:*:*
cpe:2.3:a:fxsound:fxsound:1.1.12.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:th2016b_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:rstar_rtu_host:1.33.0:*:*:*:*:*:*:*
cpe:2.3:a:moonsoftware:password_agent:20.10.1:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:portable_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2306_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dtl201b\/2b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:krylack:asterisks_password_decryptor:3.31.107:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:th2016b:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:ir420_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:lp100:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2055b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:rstinstruments:ipi_utility:1.05.0:*:*:*:*:*:*:*
cpe:2.3:a:rovio:bad_piggies:1.3.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2350:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2011_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:lp100_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mycleanpc:4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:c109:-:*:*:*:*:*:*:*
cpe:2.3:a:realdefense:mypasslock:1.9.6:*:*:*:*:*:*:*
cpe:2.3:a:boom:boomtv_streamer_portal:2.2.1:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2485_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:gaa2820:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:vw0420_firmware:1.33.0:*:*:*:*:*:*:*
cpe:2.3:a:vigem:vigembus_driver:1.16.116:*:*:*:*:*:*:*
cpe:2.3:a:honeygain:honeygain:0.10.7.0:*:*:*:*:windows:*:*
cpe:2.3:h:rstinstruments:dtl201b\/2b:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ma7:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:ma7_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:ic6660_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:c109_firmware:1.4.0.2:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:ic6660:-:*:*:*:*:*:*:*
cpe:2.3:a:flamory:flamory:4.2.19.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2485:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:ic6560_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2050:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:qb120:-:*:*:*:*:*:*:*
cpe:2.3:a:jki:vi_package_manager:21.1.2754:*:*:*:*:*:*:*
cpe:2.3:a:krylack:archive_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dtsaa_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:rtu:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt2011b:-:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2350_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:jpsoft:take_command:28.2.18:*:*:*:*:*:*:*
cpe:2.3:a:krylack:zip_password_recovery:3.70.69:*:*:*:*:*:*:*
cpe:2.3:a:gamecaster:gamecaster:4.0.2109.2802:*:*:*:*:*:*:*
cpe:2.3:a:rovio:angry_birds_space:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:rstinstruments:inclinalysis_digital_inclinometer:2.48.9:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:dt2011b_firmware:1.19.4.0:*:*:*:*:*:*:*
cpe:2.3:a:getmailbird:mailbird:2.9.50.0:*:*:*:*:*:*:*
cpe:2.3:o:rstinstruments:mems_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:sg350:-:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:dt4205:-:*:*:*:*:*:*:*
cpe:2.3:a:vpnhood:vpnhood:2.4.299:*:*:*:*:windows:*:*
cpe:2.3:a:gainedge:better_explorer:2020.3.15.1304:*:*:*:*:*:*:*
cpe:2.3:h:rstinstruments:portable_tilt_meter:-:*:*:*:*:*:*:*
cpe:2.3:a:emeditor:emeditor:21.3.0:*:*:*:*:*:*:*
cpe:2.3:a:plagiarismcheckerx:plagiarism_checker_x:8.0.6:*:*:*:*:*:*:*
First Time Rstinstruments sg350 Firmware
Getmailbird
Rstinstruments sg350
Krylack burning Suite
Rstinstruments portable Tilt Meter
Rstinstruments vw2106
Rstinstruments dt2040
Realdefense mycleanid
Rstinstruments ic6660
Vrdesktop virtual Desktop Streamer
Freesnippingtool
Rstinstruments dtl201b\/2b Firmware
Xsplit xsplit Express Video Editor
Honeygain
Gainedge better Explorer
Rstinstruments dt2055b
Rstinstruments inclinalysis Digital Inclinometer
3cx crm Template Generator
Gainedge
Realdefense
Vigem vigembus Driver
Rstinstruments dt2011 Firmware
Rstinstruments rtu Firmware
Gamecaster
Rstinstruments dt2306
Rstinstruments th2016b
Rstinstruments dt2350 Firmware
Nefarius
Rstinstruments dtsaa
Rstinstruments dt2011
Rstinstruments ma7 Firmware
Rstinstruments th2016 Firmware
Guzogo guzogo
Vigem
Krylack rar Password Recovery
Rstinstruments mtcm Firmware
Prusa3d
Rstinstruments c109 Firmware
Krylack asterisks Password Decryptor
Rovio bad Piggies
Urban-vpn
Rovio
Rstinstruments mems Tilt Meter
Krylack archive Password Recovery
Boom
Rstinstruments gaa2820 Firmware
Rstinstruments dt2040 Firmware
Rstinstruments portable Tilt Meter Firmware
Rstinstruments rstar Rtu Host
Rstinstruments gaa2820
Fxsound
Rstinstruments
Rstinstruments dt2485
Plagiarismcheckerx plagiarism Checker X
Fxsound fxsound
Codesector teracopy
Flamory flamory
Rstinstruments qb120 Firmware
Krylack volume Serial Number Editor
3cx call Flow Designer
Realdefense mypasslock
Rstinstruments ir420 Firmware
Rstinstruments qb120
Jpsoft take Command
Rstinstruments dtsaa Firmware
Rstinstruments th2016b Firmware
Boom boomtv Streamer Portal
Emeditor emeditor
Rstinstruments mems Tilt Meter Firmware
Rstinstruments dt2050b Firmware
Flamory
Rstinstruments vw0420
Xsplit
Moonsoftware password Agent
Rstinstruments dt2050b
Rstinstruments ipi Utility
Prusa3d prusaslicer
3cx
Emeditor
Rstinstruments c109
Krylack
Rstinstruments lp100
Gamecaster gamecaster
Rstinstruments dt2055b Firmware
Vpnhood
Rstinstruments vw0420 Firmware
Rstinstruments vw2106 Firmware
Rstinstruments dt4205 Firmware
Urban-vpn urban Vpn
Rstinstruments dtl201b\/2b
Rstinstruments dt2011b
Rstinstruments lp100 Firmware
Guzogo
Realdefense mycleanpc
Rstinstruments dt2485 Firmware
Jpsoft
Krylack zip Password Recovery
Vpnhood vpnhood
Rstinstruments th2016
Codesector direct Folders
Rstinstruments ma7
Rstinstruments dt2050 Firmware
Rstinstruments mtcm
Nefarius scptoolkit
Vrdesktop
Rstinstruments ir420
Rstinstruments dt2011b Firmware
Rstinstruments dt4205
Jki
Jki vi Package Manager
Rovio angry Birds Space
Freesnippingtool free Snipping Tool
Moonsoftware
Rstinstruments ic6560
Codesector
Rstinstruments dt2050
Rstinstruments ic6660 Firmware
Rstinstruments rtu
Rstinstruments ic6560 Firmware
Rstinstruments dt2350
Plagiarismcheckerx
Getmailbird mailbird
Rstinstruments dt2306 Firmware
Honeygain honeygain

21 Jun 2022, 19:39

Type Values Removed Values Added
References (MISC) http://caphyon.com - (MISC) http://caphyon.com - Product
References (MISC) http://advanced.com - (MISC) http://advanced.com - Product
References (MISC) https://www.advancedinstaller.com/security-updates-auto-updater.html - (MISC) https://www.advancedinstaller.com/security-updates-auto-updater.html - Patch, Vendor Advisory
References (MISC) https://gerr.re/posts/cve-2022-27438/ - (MISC) https://gerr.re/posts/cve-2022-27438/ - Exploit, Third Party Advisory
CWE CWE-494
CPE cpe:2.3:a:caphyon:advanced_installer:*:*:*:*:*:*:*:*
First Time Caphyon advanced Installer
Caphyon
CVSS v2 : unknown
v3 : unknown 		v2 : 5.1
v3 : 8.1

14 Jun 2022, 16:15

Type Values Removed Values Added
Summary Caphyon Ltd Advanced Installer 19.2 was discovered to contain a remote code execution (RCE) vulnerability via the Update Check function. Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.
References
  • (MISC) https://www.advancedinstaller.com/security-updates-auto-updater.html -

06 Jun 2022, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-06-06 23:15

Updated : 2023-12-10 14:22

NVD link : CVE-2022-27438

Mitre link : CVE-2022-27438

CVE.ORG link : CVE-2022-27438

JSON object : View

Products Affected

rstinstruments

  • dt2050b_firmware
  • ic6560
  • dt2055b_firmware
  • dt2011b_firmware
  • th2016_firmware
  • mems_tilt_meter_firmware
  • dt2485
  • rtu_firmware
  • c109_firmware
  • dt2306
  • dt4205_firmware
  • th2016b
  • ic6560_firmware
  • dt2011
  • mems_tilt_meter
  • lp100
  • rtu
  • vw0420
  • dt2011_firmware
  • ir420_firmware
  • dt2485_firmware
  • qb120_firmware
  • mtcm_firmware
  • dtsaa
  • th2016
  • vw2106
  • dt2050_firmware
  • ma7
  • dt2306_firmware
  • gaa2820
  • dt2050b
  • dt2350_firmware
  • dt2350
  • gaa2820_firmware
  • sg350_firmware
  • ic6660_firmware
  • vw0420_firmware
  • sg350
  • dt2011b
  • dtl201b\/2b_firmware
  • dt2055b
  • dt4205
  • portable_tilt_meter
  • dt2050
  • inclinalysis_digital_inclinometer
  • dtsaa_firmware
  • lp100_firmware
  • ma7_firmware
  • dt2040
  • qb120
  • rstar_rtu_host
  • vw2106_firmware
  • ic6660
  • th2016b_firmware
  • c109
  • ir420
  • dtl201b\/2b
  • portable_tilt_meter_firmware
  • mtcm
  • dt2040_firmware
  • ipi_utility

flamory

  • flamory

realdefense

  • mycleanid
  • mycleanpc
  • mypasslock

krylack

  • zip_password_recovery
  • archive_password_recovery
  • asterisks_password_decryptor
  • volume_serial_number_editor
  • burning_suite
  • rar_password_recovery

urban-vpn

  • urban_vpn

gainedge

  • better_explorer

3cx

  • crm_template_generator
  • call_flow_designer

gamecaster

  • gamecaster

guzogo

  • guzogo

prusa3d

  • prusaslicer

jpsoft

  • take_command

vigem

  • vigembus_driver

codesector

  • direct_folders
  • teracopy

synaptics

  • displaylink_usb_graphics

nefarius

  • scptoolkit

vpnhood

  • vpnhood

caphyon

  • advanced_installer

boom

  • boomtv_streamer_portal

vrdesktop

  • virtual_desktop_streamer

getmailbird

  • mailbird

emeditor

  • emeditor

freesnippingtool

  • free_snipping_tool

fxsound

  • fxsound

honeygain

  • honeygain

jki

  • vi_package_manager

rovio

  • bad_piggies
  • angry_birds_space

moonsoftware

  • password_agent

plagiarismcheckerx

  • plagiarism_checker_x

xsplit

  • xsplit_express_video_editor
CWE
CWE-494

Download of Code Without Integrity Check