High severity7.8NVD Advisory· Published Mar 30, 2023· Updated Jun 17, 2026
CVE-2023-29059
CVE-2023-29059
Description
3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX DesktopApp Electron macOS application.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Patches
Vulnerability mechanics
References
6- news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/nvdExploitTechnical DescriptionThird Party Advisory
- www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/nvdExploitThird Party Advisory
- www.fortinet.com/blog/threat-research/3cx-desktop-app-compromisednvdExploitThird Party Advisory
- www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threatsnvdExploitThird Party Advisory
- www.3cx.com/blog/news/desktopapp-security-alert/nvdVendor Advisory
- cwe.mitre.org/data/definitions/506.htmlnvdTechnical Description
News mentions
0No linked articles in our index yet.