


On the affected users computer, open Control Panel or "appwiz.cpl"

Take note that this search only finds connected and running DesktopApps. You can easily check what Users/Extensions are using the DesktopApp and if they are on an affected version by navigating to the 3CX Management Console > Selecting the Phones Tab > and searching for "DesktopApp" This affects versions 18.12.407 and 18.12.416 of the Electron Windows application shipped in Update 7, and versions, 18.12.402, 18.12.407, and 18.12.416 of the Electron macOS application. How to check for, and uninstall vulnerable 3CX DesktopApps 3CX Security Alert UPDATE: 11:20AM CST - 3CX has posted an update UPDATE: 4:13AM CST - Chrome blocks latest 3CX MSI Installer Downloads UPDATE: 9:37AM CST - CVE-2023-29059 has been created for this vulnerability UPDATE: 9:44AM CST - 3CX recommends Legacy V16 CTI Client as an alternative to PWA UPDATE: 6:59AM CST - More instruction for removal and mass removal Powershell script UPDATE: 10:46AM CST - Security Incident Update Saturday 1 April 2023 UPDATE: 09:16AM CST - New Desktop App Build Number 18.12.425 Released UPDATE: 06:43AM CST - Mandiant's Initial Resultsġ.
