2 lines
3.7 KiB
JSON
2 lines
3.7 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"GullsEye terminal operating system","vendor":"GullsEye","versions":[{"lessThan":"5.0.13","status":"affected","version":"0","versionType":"custom"}]}],"source":"iletisim@usom.gov.tr"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gullseye:gullseye_terminal_operating_system:*:*:*:*:*:*:*:*","matchCriteriaId":"A3E8370B-0F8A-49E3-AE81-9A165E0E8356","versionEndExcluding":"5.0.13","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection.\n\nThis issue affects GullsEye terminal operating system: from unspecified before 5.0.13."},{"lang":"es","value":"Neutralización incorrecta de elementos especiales utilizados en una vulnerabilidad de comando SQL (\"Inyección SQL\") en el sistema operativo del terminal GullsEye GullsEye permite la inyección SQL. Este problema afecta al sistema operativo del terminal GullsEye: desde no especificado antes de 5.0.13."}],"id":"CVE-2022-3792","lastModified":"2026-06-17T05:00:18.700","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"iletisim@usom.gov.tr","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-3792","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-04-09T14:07:47.010855Z","version":"2.0.3"}}]},"published":"2023-01-10T14:15:10.507","references":[{"source":"iletisim@usom.gov.tr","tags":["Exploit","Third Party Advisory"],"url":"https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/"},{"source":"iletisim@usom.gov.tr","tags":["Exploit","Third Party Advisory"],"url":"https://omrylmz.com/cve-2022-3792-terminal-operation-system/"},{"source":"iletisim@usom.gov.tr","url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0747-2"},{"source":"iletisim@usom.gov.tr","tags":["Exploit","Third Party Advisory"],"url":"https://www.usom.gov.tr/bildirim/tr-22-0747-2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://fordefence.com/cve-2022-3792-gullseye-terminal-operation-system/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://omrylmz.com/cve-2022-3792-terminal-operation-system/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://www.usom.gov.tr/bildirim/tr-22-0747-2"}],"sourceIdentifier":"iletisim@usom.gov.tr","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-89"}],"source":"iletisim@usom.gov.tr","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-89"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|