Vulnerability Details CVE-2022-48482
3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, full backups, call recordings, and chat logs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.0%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2022-48482
-
-
-
3cx
»
3cx
»
Version: 12.5.44178.1002
cpe:2.3:a:3cx:3cx:12.5.44178.1002
-
-
3cx
»
3cx
»
Version: 15.5.3554.1
cpe:2.3:a:3cx:3cx:15.5.3554.1
-
3cx
»
3cx
»
Version: 15.5.6354.2
cpe:2.3:a:3cx:3cx:15.5.6354.2
-
3cx
»
3cx
»
Version: 18.0.0.1029
cpe:2.3:a:3cx:3cx:18.0.0.1029
-
3cx
»
3cx
»
Version: 18.0.0.1142
cpe:2.3:a:3cx:3cx:18.0.0.1142
-
3cx
»
3cx
»
Version: 18.0.0.1379
cpe:2.3:a:3cx:3cx:18.0.0.1379
-
3cx
»
3cx
»
Version: 18.0.0.1608
cpe:2.3:a:3cx:3cx:18.0.0.1608
-
3cx
»
3cx
»
Version: 18.0.0.1849
cpe:2.3:a:3cx:3cx:18.0.0.1849
-
3cx
»
3cx
»
Version: 18.0.0.1863
cpe:2.3:a:3cx:3cx:18.0.0.1863
-
3cx
»
3cx
»
Version: 18.0.0.1865
cpe:2.3:a:3cx:3cx:18.0.0.1865
-
3cx
»
3cx
»
Version: 18.0.0.1871
cpe:2.3:a:3cx:3cx:18.0.0.1871
-
3cx
»
3cx
»
Version: 18.0.0.1880
cpe:2.3:a:3cx:3cx:18.0.0.1880
-
3cx
»
3cx
»
Version: 18.0.0.451
cpe:2.3:a:3cx:3cx:18.0.0.451
-
3cx
»
3cx
»
Version: 18.0.1.214
cpe:2.3:a:3cx:3cx:18.0.1.214
-
3cx
»
3cx
»
Version: 18.0.1.226
cpe:2.3:a:3cx:3cx:18.0.1.226
-
3cx
»
3cx
»
Version: 18.0.1.234
cpe:2.3:a:3cx:3cx:18.0.1.234
-
3cx
»
3cx
»
Version: 18.0.1.237
cpe:2.3:a:3cx:3cx:18.0.1.237
-
3cx
»
3cx
»
Version: 18.0.2.302
cpe:2.3:a:3cx:3cx:18.0.2.302
-
3cx
»
3cx
»
Version: 18.0.2.307
cpe:2.3:a:3cx:3cx:18.0.2.307
-
3cx
»
3cx
»
Version: 18.0.2.314
cpe:2.3:a:3cx:3cx:18.0.2.314
-
cpe:2.3:o:microsoft:windows:-