CVE-2022-42055

2022-10-2700:00:00

mitre

www.cve.org

gl.inet

goodcloud

iot

command injection

ping

traceroute

arbitrary files

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

34.1%

JSON

Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system.

References

boschko.ca/glinet-router