What’s Vulnerable › Vulnerabilities

CVE-2022-31215

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-05-20 · updated 2026-06-17

Description

In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. This allows remote attackers to bypass firewall blocking rules for a time period of up to 30 seconds. This affects Goverlan Reach Console before 10.5.1, Reach Server before 3.70.1, and Reach Client Agents before 10.1.11.

Affected products

• Goverlan Client Agent: before 10.1.11 — fixed in 10.1.11
• Goverlan Reach Console: before 10.5.1 — fixed in 10.5.1
• Goverlan Reach Server: before 3.70.1 — fixed in 3.70.1

How to fix

Upgrade to a fixed version: Goverlan Client Agent 10.1.11; Goverlan Reach Console 10.5.1; Goverlan Reach Server 3.70.1. Check the vendor advisory for mitigations.

References

• https://goverlan.com
• https://www.goverlan.com/knowledge/article/security-advisory-govsa-2022-0506-1-disable-windows-firewall/
• https://goverlan.com
• https://www.goverlan.com/knowledge/article/security-advisory-govsa-2022-0506-1-disable-windows-firewall/

Get alerted when CVE-2022-31215 or the next vulnerability affects your stack