CVE-2022-42055

6.5 mediumEPSS 1.7%

Medium (6.5) in gl-inet goodcloud. EPSS 1.7% chance of exploitation in the next 30 days.

Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-10-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gl-inet:goodcloud

References

https://boschko.ca/glinet-router
https://boschko.ca/glinet-router

Check your stack JSON