Review reviewHigh

CVE-2022-27438

advanced installer, call flow designer

Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.

CVSS: 8.1
EPSS: 1.98%
CISA KEV: Not listed
Published: 2022.06.07

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability1.98%

Technical severityCVSS 8.1

Vulnerability overview

Affected product and versions

Product: advanced installer, call flow designer
Affected versions: < 19.4, 18.2.13, 2.1.23, 2.2.1, 4.0, 3.8.5, 21.3.0, 4.2.19.0, 5.6.0.0, 1.1.12.0, 2020.3.15.1304, 4.0.2109.2802, 2.9.50.0, 1.0.5.0, 0.10.7.0, 21.1.2754, 28.2.18, 3.70.69, 3.31.107
Fixed versions: 19.4, 10.3.6400.0

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that advanced installer, call flow designer and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-494