Shim Bootloader CVE-2023-40547

[MyParadigm]

Hello,
Is 3CX vulnerable to the Shim Bootloader CVE-2023-40547 vulnerability?

 

[Agathocles Prodromou]

Hi,

The 3CX ISO is running on Debian and Debian has not released an update for this vulnerability yet (for any Debian version) so technically it is.

In most environments it is highly unlikely that it will be exploited. It's not trivial to exploit and has certain prerequisites.