Solved CVE-2022-28005 CVSS 9.8 in 3CX V16 - when hotfix will be available ?

[Patryk Lukomir]

Hello,

I would like to know if there will be hotfix, patch available for 3CX V16 version ? There are plenty of users with V16 of 3CX. The Vulnerability is pretty dangerous with CVSS 9.8 - https://www.opencve.io/cve/CVE-2022-28005

On official 3CX page there is information that support for V16 (including security patches) is available to the end of November 2022. Based on this i assume that hotfix will be available very soon?

 

[NickD_3CX]

V16 installations were not affected by this, so there is nothing to do.

Once you decide to upgrade to V18, the version that is currently out has this patched, so at not time during the process will you be subject to this vulnerability.

I'll mark this one as 'solved'.