Patch & vulnerability status
3CXPhone for Windows 18.13.959
Latest tracked version 18.13.959. Release status, tracked CVEs, and automated cross-platform patching for 3CXPhone for Windows.
Category: Telephony and Meetings
| Platform | Latest version | CVEs tracked | Last checked |
|---|---|---|---|
| Windows | 18.13.959 | 2 | 2024-12-06 |
Known vulnerabilities (CVEs) in 3CXPhone for Windows
Lavawall tracks 2 published CVEs affecting 3CXPhone for Windows, and deploys the versions that fix them automatically across your fleet.
| CVE | Published | Severity | Details | Vector |
|---|---|---|---|---|
| CVE-2019-9972 | 2022-06-07 18:15:10 | HIGH (9) | PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an authenticated attacker to run arbitrary commands with the phonesystem user privileges because of "<space><space> followed by <shift><enter>" mishandling. | NETWORK |
| CVE-2019-9971 | 2022-06-07 18:15:10 | HIGH (9) | PhoneSystem Terminal in 3CX Phone System (Debian based installation) 16.0.0.1570 allows an attacker to gain root privileges by using sudo with the tcpdump command, without a password. This occurs because the -z (aka postrotate-command) option to tcpdump can be unsafe when used in conjunction with sudo. | NETWORK |
Why keeping 3CXPhone for Windows patched matters
Unpatched third-party applications are one of the most common ways attackers get in: 57% of breached MSP clients and 32% of ransomware cases trace back to a missing patch. Every 3CXPhone for Windows release that fixes a security bug is public, so attackers see it too, and an out-of-date install becomes a documented way in. Tracking the installed version on every machine and closing the gap quickly is what turns a disclosed CVE into a non-event.
How Lavawall® patches 3CXPhone for Windows
Lavawall® watches 3CXPhone for Windows releases and CVEs continuously, ranks each update by risk, and deploys it across your whole fleet, Windows, macOS, and Linux, from a single agent, independently of your RMM. You get one place to see which machines are behind on 3CXPhone for Windows, one policy to bring them current, and timestamped evidence for audits.
Frequently asked questions
Lavawall tracks 3CXPhone for Windows at version 18.13.959 (last checked 2024-12-06). New releases are monitored continuously and can be deployed automatically across your fleet.
Lavawall tracks 2 CVEs for 3CXPhone for Windows and remediates them automatically as part of patching.
Deploy the Lavawall® agent and 3CXPhone for Windows updates are applied automatically across Windows, macOS, and Linux, risk-ranked and reported, independently of your RMM.
Lavawall® monitors releases and CVEs for 3CXPhone for Windows through public information and proprietary statistical analysis, and can patch it automatically across your fleet.