CVE-2022-31215

In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. This allows remote attackers to bypass firewall blocking rules for a time period of up to 30 seconds. This affects Goverlan Reach Console before 10.5.1, Reach Server before 3.70.1, and Reach Client Agents before 10.1.11.

CVSS v3 6.5 MEDIUM
CVSS v2.0 3.5 LOW

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

3.5^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability : 6.8 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://goverlan.com	Vendor Advisory
https://www.goverlan.com/knowledge/article/security-advisory-govsa-2022-0506-1-disable-windows-firewall/	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:goverlan:client_agent::::::::
	cpe:2.3:a:goverlan:reach_console::::::::
	cpe:2.3:a:goverlan:reach_server::::::::

History

No history.

Information

Published : 2022-05-20 12:15

Updated : 2022-06-01 19:48

NVD link : CVE-2022-31215

Mitre link : CVE-2022-31215

CVE.ORG link : CVE-2022-31215

JSON object : View

Products Affected

goverlan

client_agent
reach_server
reach_console

CWE

NVD-CWE-Other

{"id": "CVE-2022-31215", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2022-05-20T12:15:11.107", "references": [{"url": "https://goverlan.com", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.goverlan.com/knowledge/article/security-advisory-govsa-2022-0506-1-disable-windows-firewall/", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. This allows remote attackers to bypass firewall blocking rules for a time period of up to 30 seconds. This affects Goverlan Reach Console before 10.5.1, Reach Server before 3.70.1, and Reach Client Agents before 10.1.11."}, {"lang": "es", "value": "En algunos productos de Goverlan, el Firewall de Windows es deshabilitado temporalmente tras una operaci\u00f3n de actualizaci\u00f3n del agente de Goverlan. Esto permite a atacantes remotos omitir las reglas de bloqueo del firewall durante un periodo de tiempo de hasta 30 segundos. Esto afecta a Goverlan Reach Console versiones anteriores a 10.5.1, Reach Server versiones anteriores a 3.70.1 y Reach Client Agents versiones anteriores a 10.1.11"}], "lastModified": "2022-06-01T19:48:00.813", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:goverlan:client_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8E57756-FB5A-45F9-A0DB-B6D3BE2EE215", "versionEndExcluding": "10.1.11"}, {"criteria": "cpe:2.3:a:goverlan:reach_console:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F41CB74-0398-46DE-8739-62F23C084847", "versionEndExcluding": "10.5.1"}, {"criteria": "cpe:2.3:a:goverlan:reach_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED2B62FD-D2A8-4D63-89BE-534965B3DC02", "versionEndExcluding": "3.70.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}