Lucene search
HistoryOct 27, 2022 - 6:15 p.m.
CVE-2022-42055
gl.inet
goodcloud
iot
command injection
vulnerabilities
ping
traceroute
arbitrary files
system
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
34.1%
Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system.
Affected configurations
Node
gl-inetgoodcloudMatch1.00.220412.00
References
Related
cvelist
cvelist
CVE-2022-42055
2022-10-27 00:00:00
cve
cve
CVE-2022-42055
2022-10-27 18:15:11
prion
prion
Command injection
2022-10-27 18:15:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
34.1%
Related for NVD:CVE-2022-42055