Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-48483

3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 files via /Electron/download directory traversal in conjunction with a path component that has a drive letter and uses backslash characters. NOTE: this issue exists because of an incomplete fix for CVE-2022-28005.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.0%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2022-48483
  • 3cx » 3cx » Version: N/A
    cpe:2.3:a:3cx:3cx:-
  • 3cx » 3cx » Version: 12.5
    cpe:2.3:a:3cx:3cx:12.5
  • 3cx » 3cx » Version: 12.5.44178.1002
    cpe:2.3:a:3cx:3cx:12.5.44178.1002
  • 3cx » 3cx » Version: 15
    cpe:2.3:a:3cx:3cx:15
  • 3cx » 3cx » Version: 15.5.3554.1
    cpe:2.3:a:3cx:3cx:15.5.3554.1
  • 3cx » 3cx » Version: 15.5.6354.2
    cpe:2.3:a:3cx:3cx:15.5.6354.2
  • 3cx » 3cx » Version: 18.0.2.315
    cpe:2.3:a:3cx:3cx:18.0.2.315
  • 3cx » 3cx » Version: 18.0.3.450
    cpe:2.3:a:3cx:3cx:18.0.3.450


Products
Pricing
Contact Us

Shodan ® - All rights reserved