Threat Advisories - NVD Disclosed January 10, 2023

CVE-2023-21674

Windows ALPC Elevation of Privilege Vulnerability Advisory

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

This vulnerability in Windows allows an attacker with local access to gain elevated privileges. This could enable unauthorized access to sensitive data or disruption of business operations, posing a significant risk to organizations. Updates from the vendor are recommended to address this issue.

NVD published: January 10, 2023 • CISA KEV

CVE advisoryCRITICAL

CVE-2022-4422

Attacker can control Call Center System and steal customer data due to SQL injection flaw

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical flaw in the Bulutses Call Center System allows unauthenticated attackers to steal customer data or take control of the system, making immediate attention and updates essential for any organization using this software.

NVD published: January 10, 2023

CVE advisoryCRITICAL

CVE-2022-3792

Gullseye terminal systems can be fully controlled by attackers.

Halo Surface Signal: 3 out of 5 — possibly public-facing.

An external attacker can steal sensitive data by exploiting a flaw in GullsEye Terminal OS. This could lead to unauthorized access to critical operational information.

NVD published: January 10, 2023