CVE-2022-48482

Mô tả

Tham khảo

• medium.com/%40frycos/pwning-3cx-phone-management-backends-from-the-internet-d0096339dd88
• 3cx.com/blog/change-log/phone-system-change-log · Release Notes

Lỗ hổng khác của 3cx

• CVE-2023-27362CAO 7.83CX Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on a…
• CVE-2023-49954NGHIÊM TRỌNG 9.8The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address…
• CVE-2022-48483CAO 7.53CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/dow…
• CVE-2023-29059CAO 7.83CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18…
• CVE-2022-28005NGHIÊM TRỌNG 9.8An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abu…