Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-494.
Summary
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 99
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:caphyon:advanced_installer:*:*:*:*:*:*:*:* | before 19.4 | Vulnerable | Caphyon |
| cpe:2.3:a:3cx:call_flow_designer:18.2.13:*:*:*:*:*:*:* | 18.2.13 | Vulnerable | 3CX |
| cpe:2.3:a:3cx:crm_template_generator:2.1.23:*:*:*:*:*:*:* | 2.1.23 | Vulnerable | 3CX |
| cpe:2.3:a:boom:boomtv_streamer_portal:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Boom |
| cpe:2.3:a:codesector:direct_folders:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Codesector |
| cpe:2.3:a:codesector:teracopy:3.8.5:*:*:*:*:*:*:* | 3.8.5 | Vulnerable | Codesector |
| cpe:2.3:a:emeditor:emeditor:21.3.0:*:*:*:*:*:*:* | 21.3.0 | Vulnerable | Emeditor |
| cpe:2.3:a:flamory:flamory:4.2.19.0:*:*:*:*:*:*:* | 4.2.19.0 | Vulnerable | Flamory |
| cpe:2.3:a:freesnippingtool:free_snipping_tool:5.6.0.0:*:*:*:*:*:*:* | 5.6.0.0 | Vulnerable | Freesnippingtool |
| cpe:2.3:a:fxsound:fxsound:1.1.12.0:*:*:*:*:*:*:* | 1.1.12.0 | Vulnerable | Fxsound |
- cpe:2.3:a:caphyon:advanced_installer:*:*:*:*:*:*:*:* Versions before 19.4 Vulnerable ·Caphyon
- cpe:2.3:a:3cx:call_flow_designer:18.2.13:*:*:*:*:*:*:* Versions 18.2.13 Vulnerable ·3CX
- cpe:2.3:a:3cx:crm_template_generator:2.1.23:*:*:*:*:*:*:* Versions 2.1.23 Vulnerable ·3CX
- cpe:2.3:a:boom:boomtv_streamer_portal:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Boom
- cpe:2.3:a:codesector:direct_folders:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Codesector
- cpe:2.3:a:codesector:teracopy:3.8.5:*:*:*:*:*:*:* Versions 3.8.5 Vulnerable ·Codesector
- cpe:2.3:a:emeditor:emeditor:21.3.0:*:*:*:*:*:*:* Versions 21.3.0 Vulnerable ·Emeditor
- cpe:2.3:a:flamory:flamory:4.2.19.0:*:*:*:*:*:*:* Versions 4.2.19.0 Vulnerable ·Flamory
- cpe:2.3:a:freesnippingtool:free_snipping_tool:5.6.0.0:*:*:*:*:*:*:* Versions 5.6.0.0 Vulnerable ·Freesnippingtool
- cpe:2.3:a:fxsound:fxsound:1.1.12.0:*:*:*:*:*:*:* Versions 1.1.12.0 Vulnerable ·Fxsound
Show 89 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:gainedge:better_explorer:2020.3.15.1304:*:*:*:*:*:*:* | 2020.3.15.1304 | Vulnerable | Gainedge |
| cpe:2.3:a:gamecaster:gamecaster:4.0.2109.2802:*:*:*:*:*:*:* | 4.0.2109.2802 | Vulnerable | Gamecaster |
| cpe:2.3:a:getmailbird:mailbird:2.9.50.0:*:*:*:*:*:*:* | 2.9.50.0 | Vulnerable | Getmailbird |
| cpe:2.3:a:guzogo:guzogo:1.0.5.0:*:*:*:*:*:*:* | 1.0.5.0 | Vulnerable | Guzogo |
| cpe:2.3:a:honeygain:honeygain:0.10.7.0:*:*:*:*:windows:*:* | 0.10.7.0 | Vulnerable | Honeygain |
| cpe:2.3:a:jki:vi_package_manager:21.1.2754:*:*:*:*:*:*:* | 21.1.2754 | Vulnerable | Jki |
| cpe:2.3:a:jpsoft:take_command:28.2.18:*:*:*:*:*:*:* | 28.2.18 | Vulnerable | Jpsoft |
| cpe:2.3:a:krylack:archive_password_recovery:3.70.69:*:*:*:*:*:*:* | 3.70.69 | Vulnerable | Krylack |
| cpe:2.3:a:krylack:asterisks_password_decryptor:3.31.107:*:*:*:*:*:*:* | 3.31.107 | Vulnerable | Krylack |
| cpe:2.3:a:krylack:burning_suite:1.20.05:*:*:*:*:*:*:* | 1.20.05 | Vulnerable | Krylack |
| cpe:2.3:a:krylack:rar_password_recovery:3.70.69:*:*:*:*:*:*:* | 3.70.69 | Vulnerable | Krylack |
| cpe:2.3:a:krylack:volume_serial_number_editor:2.02.34:*:*:*:*:*:*:* | 2.02.34 | Vulnerable | Krylack |
| cpe:2.3:a:krylack:zip_password_recovery:3.70.69:*:*:*:*:*:*:* | 3.70.69 | Vulnerable | Krylack |
| cpe:2.3:a:moonsoftware:password_agent:20.10.1:*:*:*:*:*:*:* | 20.10.1 | Vulnerable | Moonsoftware |
| cpe:2.3:a:nefarius:scptoolkit:1.6.238.16010:*:*:*:*:*:*:* | 1.6.238.16010 | Vulnerable | Nefarius |
| cpe:2.3:a:plagiarismcheckerx:plagiarism_checker_x:8.0.6:*:*:*:*:*:*:* | 8.0.6 | Vulnerable | Plagiarismcheckerx |
| cpe:2.3:a:prusa3d:prusaslicer:2.4.2:*:*:*:*:*:*:* | 2.4.2 | Vulnerable | Prusa3d |
| cpe:2.3:a:realdefense:mycleanid:4.1.4:*:*:*:*:*:*:* | 4.1.4 | Vulnerable | RealDefense |
| cpe:2.3:a:realdefense:mycleanpc:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Vulnerable | RealDefense |
| cpe:2.3:a:realdefense:mypasslock:1.9.6:*:*:*:*:*:*:* | 1.9.6 | Vulnerable | RealDefense |
| cpe:2.3:a:rovio:angry_birds_space:1.4.1:*:*:*:*:*:*:* | 1.4.1 | Vulnerable | Rovio |
| cpe:2.3:a:rovio:bad_piggies:1.3.0:*:*:*:*:*:*:* | 1.3.0 | Vulnerable | Rovio |
| cpe:2.3:a:synaptics:displaylink_usb_graphics:*:*:*:*:*:windows:*:* | before 10.3.6400.0 | Vulnerable | Synaptics |
| cpe:2.3:a:urban-vpn:urban_vpn:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | Urban-vpn |
| cpe:2.3:a:vigem:vigembus_driver:1.16.116:*:*:*:*:*:*:* | 1.16.116 | Vulnerable | Vigem |
| cpe:2.3:a:vpnhood:vpnhood:2.4.299:*:*:*:*:windows:*:* | 2.4.299 | Vulnerable | Vpnhood |
| cpe:2.3:a:vrdesktop:virtual_desktop_streamer:1.20.16:*:*:*:*:*:*:* | 1.20.16 | Vulnerable | Vrdesktop |
| cpe:2.3:a:xsplit:xsplit_express_video_editor:3.0.2001.801:*:*:*:*:*:*:* | 3.0.2001.801 | Vulnerable | Xsplit |
| cpe:2.3:o:rstinstruments:vw0420_firmware:1.33.0:*:*:*:*:*:*:* | 1.33.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:vw0420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:a:rstinstruments:inclinalysis_digital_inclinometer:2.48.9:*:*:*:*:*:*:* | 2.48.9 | Vulnerable | Rstinstruments |
| cpe:2.3:a:rstinstruments:ipi_utility:1.05.0:*:*:*:*:*:*:* | 1.05.0 | Vulnerable | Rstinstruments |
| cpe:2.3:o:rstinstruments:rstar_rtu_host:1.33.0:*:*:*:*:*:*:* | 1.33.0 | Vulnerable | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2011_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2011:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2011b_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2011b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2040_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2040:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2050_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2050:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2050b_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2050b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2055b_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2055b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2306_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2306:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2350_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt2485_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt2485:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dt4205_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dt4205:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dtsaa_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dtsaa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:ic6560_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:ic6560:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:ic6660_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:ic6660:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:dtl201b\/2b_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:dtl201b\/2b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:mtcm_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:mtcm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:gaa2820_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:gaa2820:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:rtu_firmware:1.19.4.0:*:*:*:*:*:*:* | 1.19.4.0 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:rtu:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:mems_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:* | 1.20.1 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:mems_tilt_meter:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:portable_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:* | 1.20.1 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:portable_tilt_meter:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:vw2106_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:vw2106:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:th2016_firmware:1.4.0.2:*:*:*:*:*:*:* | 1.4.0.2 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:th2016:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:th2016b_firmware:1.4.0.2:*:*:*:*:*:*:* | 1.4.0.2 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:th2016b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:ma7_firmware:1.4.0.2:*:*:*:*:*:*:* | 1.4.0.2 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:ma7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:qb120_firmware:1.4.0.2:*:*:*:*:*:*:* | 1.4.0.2 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:qb120:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:sg350_firmware:1.4.0.2:*:*:*:*:*:*:* | 1.4.0.2 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:sg350:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:ir420_firmware:1.4.0.2:*:*:*:*:*:*:* | 1.4.0.2 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:ir420:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:lp100_firmware:1.4.0.2:*:*:*:*:*:*:* | 1.4.0.2 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:lp100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
| cpe:2.3:o:rstinstruments:c109_firmware:1.4.0.2:*:*:*:*:*:*:* | 1.4.0.2 | Vulnerable | Rstinstruments |
| cpe:2.3:h:rstinstruments:c109:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rstinstruments |
- cpe:2.3:a:gainedge:better_explorer:2020.3.15.1304:*:*:*:*:*:*:* Versions 2020.3.15.1304 Vulnerable ·Gainedge
- cpe:2.3:a:gamecaster:gamecaster:4.0.2109.2802:*:*:*:*:*:*:* Versions 4.0.2109.2802 Vulnerable ·Gamecaster
- cpe:2.3:a:getmailbird:mailbird:2.9.50.0:*:*:*:*:*:*:* Versions 2.9.50.0 Vulnerable ·Getmailbird
- cpe:2.3:a:guzogo:guzogo:1.0.5.0:*:*:*:*:*:*:* Versions 1.0.5.0 Vulnerable ·Guzogo
- cpe:2.3:a:honeygain:honeygain:0.10.7.0:*:*:*:*:windows:*:* Versions 0.10.7.0 Vulnerable ·Honeygain
- cpe:2.3:a:jki:vi_package_manager:21.1.2754:*:*:*:*:*:*:* Versions 21.1.2754 Vulnerable ·Jki
- cpe:2.3:a:jpsoft:take_command:28.2.18:*:*:*:*:*:*:* Versions 28.2.18 Vulnerable ·Jpsoft
- cpe:2.3:a:krylack:archive_password_recovery:3.70.69:*:*:*:*:*:*:* Versions 3.70.69 Vulnerable ·Krylack
- cpe:2.3:a:krylack:asterisks_password_decryptor:3.31.107:*:*:*:*:*:*:* Versions 3.31.107 Vulnerable ·Krylack
- cpe:2.3:a:krylack:burning_suite:1.20.05:*:*:*:*:*:*:* Versions 1.20.05 Vulnerable ·Krylack
- cpe:2.3:a:krylack:rar_password_recovery:3.70.69:*:*:*:*:*:*:* Versions 3.70.69 Vulnerable ·Krylack
- cpe:2.3:a:krylack:volume_serial_number_editor:2.02.34:*:*:*:*:*:*:* Versions 2.02.34 Vulnerable ·Krylack
- cpe:2.3:a:krylack:zip_password_recovery:3.70.69:*:*:*:*:*:*:* Versions 3.70.69 Vulnerable ·Krylack
- cpe:2.3:a:moonsoftware:password_agent:20.10.1:*:*:*:*:*:*:* Versions 20.10.1 Vulnerable ·Moonsoftware
- cpe:2.3:a:nefarius:scptoolkit:1.6.238.16010:*:*:*:*:*:*:* Versions 1.6.238.16010 Vulnerable ·Nefarius
- cpe:2.3:a:plagiarismcheckerx:plagiarism_checker_x:8.0.6:*:*:*:*:*:*:* Versions 8.0.6 Vulnerable ·Plagiarismcheckerx
- cpe:2.3:a:prusa3d:prusaslicer:2.4.2:*:*:*:*:*:*:* Versions 2.4.2 Vulnerable ·Prusa3d
- cpe:2.3:a:realdefense:mycleanid:4.1.4:*:*:*:*:*:*:* Versions 4.1.4 Vulnerable ·RealDefense
- cpe:2.3:a:realdefense:mycleanpc:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·RealDefense
- cpe:2.3:a:realdefense:mypasslock:1.9.6:*:*:*:*:*:*:* Versions 1.9.6 Vulnerable ·RealDefense
- cpe:2.3:a:rovio:angry_birds_space:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Rovio
- cpe:2.3:a:rovio:bad_piggies:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Rovio
- cpe:2.3:a:synaptics:displaylink_usb_graphics:*:*:*:*:*:windows:*:* Versions before 10.3.6400.0 Vulnerable ·Synaptics
- cpe:2.3:a:urban-vpn:urban_vpn:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Urban-vpn
- cpe:2.3:a:vigem:vigembus_driver:1.16.116:*:*:*:*:*:*:* Versions 1.16.116 Vulnerable ·Vigem
- cpe:2.3:a:vpnhood:vpnhood:2.4.299:*:*:*:*:windows:*:* Versions 2.4.299 Vulnerable ·Vpnhood
- cpe:2.3:a:vrdesktop:virtual_desktop_streamer:1.20.16:*:*:*:*:*:*:* Versions 1.20.16 Vulnerable ·Vrdesktop
- cpe:2.3:a:xsplit:xsplit_express_video_editor:3.0.2001.801:*:*:*:*:*:*:* Versions 3.0.2001.801 Vulnerable ·Xsplit
- cpe:2.3:o:rstinstruments:vw0420_firmware:1.33.0:*:*:*:*:*:*:* Versions 1.33.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:vw0420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:a:rstinstruments:inclinalysis_digital_inclinometer:2.48.9:*:*:*:*:*:*:* Versions 2.48.9 Vulnerable ·Rstinstruments
- cpe:2.3:a:rstinstruments:ipi_utility:1.05.0:*:*:*:*:*:*:* Versions 1.05.0 Vulnerable ·Rstinstruments
- cpe:2.3:o:rstinstruments:rstar_rtu_host:1.33.0:*:*:*:*:*:*:* Versions 1.33.0 Vulnerable ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2011_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2011:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2011b_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2011b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2040_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2040:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2050_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2050:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2050b_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2050b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2055b_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2055b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2306_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2306:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2350_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt2485_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt2485:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dt4205_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dt4205:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dtsaa_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dtsaa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:ic6560_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:ic6560:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:ic6660_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:ic6660:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:dtl201b\/2b_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:dtl201b\/2b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:mtcm_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:mtcm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:gaa2820_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:gaa2820:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:rtu_firmware:1.19.4.0:*:*:*:*:*:*:* Versions 1.19.4.0 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:rtu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:mems_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:* Versions 1.20.1 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:mems_tilt_meter:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:portable_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:* Versions 1.20.1 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:portable_tilt_meter:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:vw2106_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:vw2106:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:th2016_firmware:1.4.0.2:*:*:*:*:*:*:* Versions 1.4.0.2 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:th2016:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:th2016b_firmware:1.4.0.2:*:*:*:*:*:*:* Versions 1.4.0.2 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:th2016b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:ma7_firmware:1.4.0.2:*:*:*:*:*:*:* Versions 1.4.0.2 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:ma7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:qb120_firmware:1.4.0.2:*:*:*:*:*:*:* Versions 1.4.0.2 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:qb120:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:sg350_firmware:1.4.0.2:*:*:*:*:*:*:* Versions 1.4.0.2 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:sg350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:ir420_firmware:1.4.0.2:*:*:*:*:*:*:* Versions 1.4.0.2 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:ir420:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:lp100_firmware:1.4.0.2:*:*:*:*:*:*:* Versions 1.4.0.2 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:lp100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
- cpe:2.3:o:rstinstruments:c109_firmware:1.4.0.2:*:*:*:*:*:*:* Versions 1.4.0.2 Vulnerable ·Rstinstruments
- cpe:2.3:h:rstinstruments:c109:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rstinstruments
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-27438
- 2026-10-03 Alias added: GHSA-5xhh-3gjf-pf84
References
Sources
- CVE-2022-27438 · CVE Program
- CVE-2022-27438 · NVD
- FIRST EPSS
- GHSA-5xhh-3gjf-pf84 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences