Under Review Information about the possibility of 3CXDesktopApp.exe being vulnerable to CVE-2023-4863

[stmusr]

Hi,

I would like information about a post published last Friday (29-set-2023), about the possibility of 3CXDesktopApp.exe being vulnerable to CVE-2023-4863 (https://nvd.nist.gov/vuln/detail/CVE-2023-4863)



I received the notification of the previous post, but when I searched the forum today, I couldn't find the post or any related information.

Can 3CX support provide more information's about the possibility that 3CXDesktopApp.exe is vulnerable to CVE-2023-4863?

Thank you.

Regards.

 

[WifxMain]

To follow.

 

[DieIT]

Also following.

 

[TheodorosG_3CX]

I wanted to inform you that we are already looking into the matter. We will share additional details once available.

 

[LeiLei]

I wanted to inform you that we are already looking into the matter.

4 Weeks after the CVE was published you are now looking into the matter? 3CX: Are you kidding us?

 

[TheodorosG_3CX]

@LeiLei We have been looking into this ever since it was published. What we said is that we are aware of the matter (in response to this post) and we will share information once available.

 

[LeiLei]

@TheodorosG_3CX: 8 Weeks are gone since this vulnerability was published.
Wat is now your outcome from your investigation?
Affected or not?

 

[TheodorosG_3CX]

Please refer to this: https://www.3cx.com/community/threads/cve-2023-4863.122798/