PT-2022-20613 · Microsoft · Windows Firewall

Published 2022-05-20 · Updated 2022-06-01 · CVE-2022-31215

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Goverlan Reach Console versions prior to 10.5.1 Goverlan Reach Server versions prior to 3.70.1 Goverlan Reach Client Agents versions prior to 10.1.11

Description The issue allows remote attackers to bypass Windows Firewall blocking rules for up to 30 seconds during a Goverlan agent update operation, as the firewall is temporarily turned off.

Recommendations For Goverlan Reach Console versions prior to 10.5.1, update to version 10.5.1 or later. For Goverlan Reach Server versions prior to 3.70.1, update to version 3.70.1 or later. For Goverlan Reach Client Agents versions prior to 10.1.11, update to version 10.1.11 or later.

Exploit

Fix

Related Identifiers

CVE-2022-31215

Affected Products

Windows Firewall

References · 5

• 🔥 https://goverlan.com/knowledge/article/security-advisory-govsa-2022-0506-1-disable-windows-firewall · Exploit
• https://osv.dev/vulnerability/CVE-2022-31215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31215 · Security Note
• https://goverlan.com · Vendor Advisory
• https://t.me/cibsecurity/43050 · Telegram Post