Gl-Inet Goodcloud vulnerabilities

4 CVEs affecting Gl-Inet Goodcloud, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-44212, published 2022-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-42055, published 2022-10-27. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the…
CVE-2022-44211, published 2022-12-01. High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days. In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings.
CVE-2022-44212, published 2022-12-01. Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days. In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel.
CVE-2022-42054, published 2022-10-27. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple stored cross-site scripting (XSS) vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 allow attackers to execute arbitrary web scripts or HTML via a…