CVE-2022-27438

mediumpriority · track · 43OT risk · elevatedEPSS 0.021 · 82 %ileexploit · PoCEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

2.11% (82nd) EPSS

CVSS 5.1 · medium

Is it mine?

72 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-26

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

cvss

Technical severity, 0–10. One row per scoring source.

9.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 5.1–9.6

v2.05.1mediumAV:N/AC:H/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 4.9 · impact 6.4

v3.18.1highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.2 · impact 5.9

v3.19.6criticalAV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.7highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-494USprimaryCWE-494US

exploits (1)

Public proof-of-concept and weaponised exploit code.

gar-re/cve-2022-27438gar-re/cve-2022-27438PoC · poc_in_github

affected products (72)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Caphyon Ltd. Advanced Installer≤ 19.3fstec_bduRU
3cx call flow designer= 18.2.13nvdUScpe:2.3:a:3cx:call_flow_designer:*:*:*:*:*:*:*:*
3cx crm template generator= 2.1.23nvdUScpe:2.3:a:3cx:crm_template_generator:*:*:*:*:*:*:*:*
boom boomtv streamer portal= 2.2.1nvdUScpe:2.3:a:boom:boomtv_streamer_portal:*:*:*:*:*:*:*:*
caphyon advanced installer< 19.4nvdUScpe:2.3:a:caphyon:advanced_installer:*:*:*:*:*:*:*:*
codesector direct folders= 4.0nvdUScpe:2.3:a:codesector:direct_folders:*:*:*:*:*:*:*:*
codesector teracopy= 3.8.5nvdUScpe:2.3:a:codesector:teracopy:*:*:*:*:*:*:*:*
emeditor emeditor= 21.3.0nvdUScpe:2.3:a:emeditor:emeditor:*:*:*:*:*:*:*:*
flamory flamory= 4.2.19.0nvdUScpe:2.3:a:flamory:flamory:*:*:*:*:*:*:*:*
freesnippingtool free snipping tool= 5.6.0.0nvdUScpe:2.3:a:freesnippingtool:free_snipping_tool:*:*:*:*:*:*:*:*
fxsound fxsound= 1.1.12.0nvdUScpe:2.3:a:fxsound:fxsound:*:*:*:*:*:*:*:*
gainedge better explorer= 2020.3.15.1304nvdUScpe:2.3:a:gainedge:better_explorer:*:*:*:*:*:*:*:*
gamecaster gamecaster= 4.0.2109.2802nvdUScpe:2.3:a:gamecaster:gamecaster:*:*:*:*:*:*:*:*
getmailbird mailbird= 2.9.50.0nvdUScpe:2.3:a:getmailbird:mailbird:*:*:*:*:*:*:*:*
guzogo guzogo= 1.0.5.0nvdUScpe:2.3:a:guzogo:guzogo:*:*:*:*:*:*:*:*
honeygain honeygain= 0.10.7.0nvdUScpe:2.3:a:honeygain:honeygain:*:*:*:*:*:*:*:*
jki vi package manager= 21.1.2754nvdUScpe:2.3:a:jki:vi_package_manager:*:*:*:*:*:*:*:*
jpsoft take command= 28.2.18nvdUScpe:2.3:a:jpsoft:take_command:*:*:*:*:*:*:*:*
krylack archive password recovery= 3.70.69nvdUScpe:2.3:a:krylack:archive_password_recovery:*:*:*:*:*:*:*:*

showing 20 of 72

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2022-06-06modified 2026-07-09

related (311)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-3502US	—OT critical	5.58% (93rd)	KEV	2026-03-30
TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tam…
CVE-2025-15556US	high7.5OT critical	1.77% (78th)	KEV	2026-02-03
Notepad++ versions prior to 8.8.9, when using the WinGUp updater, contain an update integrity verification vulnerability where downloaded update metadata and installers are not cry…
CVE-2022-40799US	high8.8OT critical	33.7% (98th)	KEV	2022-11-29
Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the device.
CVE-2021-44168US	high7.8OT critical	0.86% (58th)	KEV	2022-01-04
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbit…
CVE-2021-30657US	medium5.5OT critical	68.5% (99th)	KEV	2021-09-08
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekee…

+306 more

references (10)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan