4/10/2023 – This will be the last message from Range regarding the incident.

As you may be aware last week, Range was alerted to a vulnerability with the 3CX Desktop App (Electron App). 3CX released a NEW updated Desktop App, yesterday, April 9th, 2023. You can now safely download the new version of the Desktop app at your convenience. If you had an old version of the Desktop App on your computer, it should automatically be updated.

To read more about the new Desktop App release, please visit this post on the 3CX blog.

If you have any further questions, please get in touch with your sales representative at Range or call 800.927.2643.

4/3/2023

3CX continues to investigate the incident. To read more about what 3CX is doing, visit the 3CX blog. If you have any questions, please get in touch with your sales representative at Range or call 800.927.2643.

3/31/2023

As you may be aware, Range uses software to provide phone service to your business called 3CX. Range has been alerted to a vulnerability with the 3CX Desktop App (Electron App). As a valued Range customer, we are sharing what information we have on the issue.

First, your 3CX Server, any 3CX mobile apps (for iOS and Android), and the 3CX Web Client applications remain unaffected. This vulnerability only affects the 3CX Desktop App with the following versions:

• Windows: v18.12.407 & v18.23.416
• MacOS: v18.11.1213, v18.12.402, v18.12.407, & v18.12.416

Range recommends customers follow the guidelines provided by 3CX in their blog post on the topic, which can be found here.

Range continues to monitor the issue and will follow up with customers when an “official” patch for the 3CX Desktop App is released. In the meantime, we strongly recommend uninstalling and 3CX Desktop App, and alternatively using the 3CX PWA Application (instructions on the 3CX blog post).

Key points for this notice:

1. Review the 3CX blog for updates and recommendations.
2. Only the 3CX Desktop App (Electron App) has an issue. Uninstall it as soon as possible.
3. Anti-Virus applications are starting to alert on compromised 3CX Desktop Apps
4. Recommend installing the PWA (Web Client) if a software client is needed.
5. Range is monitoring for the release of the “official” patched 3CX Desktop App.

We will notify you once a patch has been released and will follow up with all customers to ensure no further issues. We apologize for this inconvenience.

If you have any questions, please get in touch with your sales representative at Range or call 800.927.2643.