Caphyon records

3 published records for vendor caphyon.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2022-27438Proof of concept	Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affectcaphyon · advanced installer · CWE-494 pre-auth RCE	High8.1	—	2.0%	Jun 6, 2022
31Monitor	CVE-2022-4956No exploit	Caphyon Advanced Installer WinSxS DLL uncontrolled search pathcaphyon · advanced installer · CWE-427	High7.8	—	0.4%	Sep 30, 2023
31Monitor	CVE-2023-25396No exploit	Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate caphyon · advanced installer Local privilege escalation	High7.8	—	0.2%	Feb 8, 2023

CVE-2022-27438
33Monitor
Caphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affect
HighCVSS 8.1Proof of conceptEPSS 2%
- pre-auth RCE
caphyon · advanced installerJun 6, 2022
CVE-2022-4956
31Monitor
Caphyon Advanced Installer WinSxS DLL uncontrolled search path
HighCVSS 7.8No exploitEPSS 0%
caphyon · advanced installerSep 30, 2023
CVE-2023-25396
31Monitor
Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
caphyon · advanced installerFeb 8, 2023