Critical · 9.8 CVE-2022-43977 EUVD-2022-46945GHSA-j7p9-8xw7-jgxw

An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn …

Published Jan 17, 2023 · Updated Apr 4, 2025 · Assigned by mitre

Description

An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks access control.

Advisories 1

BSI-2022-0005 Multiple Vulnerabilities in GE MS 3000 BSI CERT-Bund (WID) · Nov 2, 2022

References

https://wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json

EUVD	v3.1	9.8
CISA-ADP	v3.1	9.8