CVE-2022-3792

SQL Injection in GullsEye Terminal Operating System

CVSS 9.8 CRITICALEPSS 14.2%CWE-89

Vexday Risk Score

53Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 9.8EPSS 14.2%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

10 Jan 2023Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

GullsEye · GullsEye terminal operating system

public PoCs found — 2

cve_referencefordefence.com/cve-2022-3792-gullseye-terminal-operation-system/unverified cve_referenceomrylmz.com/cve-2022-3792-terminal-operation-system/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/https://omrylmz.com/cve-2022-3792-terminal-operation-system/https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747-2 https://www.usom.gov.tr/bildirim/tr-22-0747-2