VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jan 17, 2023· Updated Jun 17, 2026

CVE-2022-43977

CVE-2022-43977

Description

An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks access control.

Affected products

3
  • Ge/Ms 3000 Firmware
    cpe:2.3:o:ge:ms_3000_firmware:*:*:*:*:*:*:*:*
    Range: <3.7.6.25p0_3.2.2.17p0_4.7p0
  • GE Grid Solutions/MS3000cpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <3.7.6.25p0_3.2.2.17p0_4.7p0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.