CVE-2022-31215: Goverlan Client Agent

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. This allows remote attackers to bypass firewall blocking rules for a time period of up to 30 seconds. This affects Goverlan Reach Console before 10.5.1, Reach Server before 3.70.1, and Reach Client Agents before 10.1.11.

Affected products

• Goverlan Client Agent: before 10.1.11 (fixed in 10.1.11)
• Goverlan Reach Console: before 10.5.1 (fixed in 10.5.1)
• Goverlan Reach Server: before 3.70.1 (fixed in 3.70.1)

Published 2022-05-20. Last modified 2026-06-17.