CVE-2023-29059

3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versions 18.12.407 and 18.12.416 of the 3CX DesktopApp Electron Windows application shipped in Update 7, and versions 18.11.1213, 18.12.402, 18.12.407, and 18.12.416 of the 3CX DesktopApp Electron macOS application.

• https://cwe.mitre.org/data/definitions/506.htmlTechnical Description
• https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/Exploit, Technical Description, Third Party Advisory
• https://www.3cx.com/blog/news/desktopapp-security-alert/Vendor Advisory
• https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/Exploit, Third Party Advisory
• https://www.fortinet.com/blog/threat-research/3cx-desktop-app-compromisedExploit, Third Party Advisory
• https://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threatsExploit, Third Party Advisory
• https://cwe.mitre.org/data/definitions/506.htmlTechnical Description
• https://news.sophos.com/en-us/2023/03/29/3cx-dll-sideloading-attack/Exploit, Technical Description, Third Party Advisory
• https://www.3cx.com/blog/news/desktopapp-security-alert/Vendor Advisory
• https://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/Exploit, Third Party Advisory
• https://www.fortinet.com/blog/threat-research/3cx-desktop-app-compromisedExploit, Third Party Advisory
• https://www.huntress.com/blog/3cx-voip-software-compromise-supply-chain-threatsExploit, Third Party Advisory

Published

Mar 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29053A vulnerability has been identified in JT Open (All versions…7.8
• CVE-2023-29054A vulnerability has been identified in SCALANCE X200-4P IRT …7.4
• CVE-2023-29055In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Co…7.5
• CVE-2023-29056A valid LDAP user, under specific conditions, will default t…5.9
• CVE-2023-29057A valid XCC user's local account permissions overrides their…8.8
• CVE-2023-29058A valid, authenticated XCC user with read-only permissions c…6.5
• CVE-2023-2906Due to a failure in validating the length provided by an att…6.5
• CVE-2023-29060The FACSChorus workstation operating system does not restric…5.7
• CVE-2023-29061There is no BIOS password on the FACSChorus workstation. A t…5.2
• CVE-2023-29062The Operating System hosting the FACSChorus application is c…3.8
• CVE-2023-29063The FACSChorus workstation does not prevent physical access …2.4
• CVE-2023-29064The FACSChorus software contains sensitive information store…4.3