High severity8.1NVD Advisory· Published Jun 6, 2022· Updated Jul 9, 2026
CVE-2022-27438
CVE-2022-27438
Description
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
71<=19.3+ 1 more
- (no CPE)range: <=19.3
- (no CPE)
- Range: <=19.3
- cpe:2.3:a:boom:boomtv_streamer_portal:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:codesector:direct_folders:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:codesector:teracopy:3.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:freesnippingtool:free_snipping_tool:5.6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:gainedge:better_explorer:2020.3.15.1304:*:*:*:*:*:*:*
- cpe:2.3:a:gamecaster:gamecaster:4.0.2109.2802:*:*:*:*:*:*:*
- cpe:2.3:a:getmailbird:mailbird:2.9.50.0:*:*:*:*:*:*:*
- cpe:2.3:a:jki:vi_package_manager:21.1.2754:*:*:*:*:*:*:*
- cpe:2.3:a:jpsoft:take_command:28.2.18:*:*:*:*:*:*:*
- cpe:2.3:a:krylack:archive_password_recovery:3.70.69:*:*:*:*:*:*:*
- cpe:2.3:a:krylack:asterisks_password_decryptor:3.31.107:*:*:*:*:*:*:*
- cpe:2.3:a:krylack:burning_suite:1.20.05:*:*:*:*:*:*:*
- cpe:2.3:a:krylack:rar_password_recovery:3.70.69:*:*:*:*:*:*:*
- cpe:2.3:a:krylack:volume_serial_number_editor:2.02.34:*:*:*:*:*:*:*
- cpe:2.3:a:krylack:zip_password_recovery:3.70.69:*:*:*:*:*:*:*
- cpe:2.3:a:moonsoftware:password_agent:20.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:nefarius:scptoolkit:1.6.238.16010:*:*:*:*:*:*:*
- cpe:2.3:a:plagiarismcheckerx:plagiarism_checker_x:8.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:prusa3d:prusaslicer:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:realdefense:mycleanid:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:realdefense:mycleanpc:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:realdefense:mypasslock:1.9.6:*:*:*:*:*:*:*
- cpe:2.3:a:rovio:angry_birds_space:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:rovio:bad_piggies:1.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:synaptics:displaylink_usb_graphics:*:*:*:*:*:windows:*:*Range: <10.3.6400.0
- cpe:2.3:a:vigem:vigembus_driver:1.16.116:*:*:*:*:*:*:*
- cpe:2.3:a:vrdesktop:virtual_desktop_streamer:1.20.16:*:*:*:*:*:*:*
- cpe:2.3:a:xsplit:xsplit_express_video_editor:3.0.2001.801:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:vw0420_firmware:1.33.0:*:*:*:*:*:*:*
- cpe:2.3:a:rstinstruments:inclinalysis_digital_inclinometer:2.48.9:*:*:*:*:*:*:*
- cpe:2.3:a:rstinstruments:ipi_utility:1.05.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:rstar_rtu_host:1.33.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2011_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2011b_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2040_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2050_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2050b_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2055b_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2306_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2350_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt2485_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dt4205_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dtsaa_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:ic6560_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:ic6660_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:dtl201b\/2b_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:mtcm_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:gaa2820_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:rtu_firmware:1.19.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:mems_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:portable_tilt_meter_firmware:1.20.1:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:vw2106_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:th2016_firmware:1.4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:th2016b_firmware:1.4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:ma7_firmware:1.4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:qb120_firmware:1.4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:sg350_firmware:1.4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:ir420_firmware:1.4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:lp100_firmware:1.4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:rstinstruments:c109_firmware:1.4.0.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.advancedinstaller.com/security-updates-auto-updater.htmlnvdPatchVendor Advisory
- gerr.re/posts/cve-2022-27438/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.