Incorrect Access Control in GL.iNet Goodcloud Affected by Remote Exploit
CVE-2022-44211

7.4HIGH

Key Information:

Vendor

Gl-inet

Status
Goodcloud
Vendor
CVE Published:
1 December 2022

What is CVE-2022-44211?

A vulnerability exists in GL.iNet's Goodcloud version 1.1 due to incorrect access control mechanisms. This flaw permits a remote attacker to potentially access and alter device settings, posing significant security concerns for users relying on this cloud service.

References

https://forum.gl-inet.com/t/security-advisories-vulnerabi...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.