CVE-2023-29059highexplotación observada

CVE-2023-29059

Publicada el · Actualizada el

43Vexday Risk Score

Prioriza la corrección. Ella explotación observada por VulnCheck.

ssvc Actcvss 7.8epss 4.4%
de la publicación al arma
Publicada en NVD30 mar
VulnCheck29 mar
probabilidad de explotación
4.4%top 9% de las CVE
explotación observada
síVulnCheck
3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX DesktopApp Electron macOS application.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/a
Referencias
https://cwe.mitre.org/data/definitions/506.htmlhttps://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/https://www.3cx.com/blog/news/desktopapp-security-alert/https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/https://www.fortinet.com/blog/threat-research/3cx-desktop-app-compromisedhttps://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threats