PT-2022-3208 · Caphyon · Caphyon Advanced Installer
Gerr.Re
·
Published
2022-02-11
·
Updated
2023-04-28
·
CVE-2022-27438
CVSS v2.0
8.3
High
| Vector | AV:A/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Caphyon Advanced Installer versions 19.3 and earlier
Description
The issue is related to the Advanced Updater function in Caphyon Advanced Installer, which is vulnerable to remote code execution due to the lack of integrity check when handling the CustomDetection binary file with the
CustomDetectionParameter. This can be exploited by a remote attacker to execute arbitrary code through a man-in-the-middle attack. The vulnerability can be triggered when an affected installation is started, initiating the update check function.Recommendations
For versions 19.3 and earlier, consider disabling the update check function or restricting access to the CustomDetection parameter until a patch is available. As a temporary workaround, avoid using the
CustomDetectionParameter in the update check function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Caphyon Advanced Installer