CVE-2023-29059
3Cx 18.11.1213 … 18.12.416
Public PoC
CVSS Score v3.1
7.8
Click a component to see what it means
Raw vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.044
90th percentile
Summary
CVE-2023-29059 is a high-severity an unspecified weakness vulnerability in 3Cx 3Cx. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 10% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-32662
Vulnerability Data
3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416…
more
of the 3CX DesktopApp Electron macOS application.
- CWE(s)
Related Threats
CVEs Like This One
CVE-2023-49954Same product: 3Cx 3Cx
CVE-2023-27362Same product: 3Cx 3Cx
Affected Assets
3cx
3cx
18.11.1213, 18.12.402, 18.12.407, 18.12.416
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.