by Kastro
Paper/Archive/CVE-2022-3792

CVE-2022-3792

GullsEye GullsEye terminal operating system — SQL Injection in GullsEye Terminal Operating System

EPSS 14%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 96.6.966 × 2019.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

Affected

ProductAffectedFixed inSource
GullsEye terminal operating system< 5.0.135.0.13CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-22-0747-2exploitomrylmz.com/cve-2022-3792-terminal-operation-systemexploitfordefence.com/cve-2022-3792-gullseye-terminal-operation-systemrefsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747-2