PT-2022-20613

CVE-2022-31215

·

Published

2022-05-20

·

Updated

2022-06-01

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Goverlan Reach Console versions prior to 10.5.1 Goverlan Reach Server versions prior to 3.70.1 Goverlan Reach Client Agents versions prior to 10.1.11
Description The issue allows remote attackers to bypass Windows Firewall blocking rules for up to 30 seconds during a Goverlan agent update operation, as the firewall is temporarily turned off.
Recommendations For Goverlan Reach Console versions prior to 10.5.1, update to version 10.5.1 or later. For Goverlan Reach Server versions prior to 3.70.1, update to version 3.70.1 or later. For Goverlan Reach Client Agents versions prior to 10.1.11, update to version 10.1.11 or later.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾