CVE-2023-29059

Mô tả

Tham khảo

• cwe.mitre.org/data/definitions/506.html · Technical Description
• news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack · Exploit
• 3cx.com/blog/news/desktopapp-security-alert · Vendor Advisory
• crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers · Exploit
• fortinet.com/blog/threat-research/3cx-desktop-app-compromised · Exploit
• huntress.com/blog/3cx-voip-software-compromise-supply-chain-threats · Exploit

Lỗ hổng khác của 3cx

• CVE-2023-27362CAO 7.83CX Uncontrolled Search Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on a…
• CVE-2023-49954NGHIÊM TRỌNG 9.8The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address…
• CVE-2022-48483CAO 7.53CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/dow…
• CVE-2022-48482CAO 7.53CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electr…
• CVE-2022-28005NGHIÊM TRỌNG 9.8An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abu…