CVE-2023-29059

HIGH

3CX DesktopApp through 18.12.416 Embedded Malicious Code

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2023-29059 has a selected CVSS score of 7.8 (high).

Description

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX DesktopApp Electron macOS application.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Mar 29, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 23, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

3cx

Browse 3cx / 3cx
VulnCheckVersion data not supplied

References

7