Lucene search

MitreCVE-2022-43977

HistoryJan 17, 2023 - 9:15 p.m.

CVE-2022-43977

2023-01-1721:15:14

mitre

web.nvd.nist.gov

cve-2022-43977

ge grid solutions

ms3000

nvd

debug port

access control

tcp

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

62.3%

JSON

An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks access control.

Affected configurations

Nvd

Node

gems_3000_firmwareRange<3.7.6.25p0_3.2.2.17p0_4.7p0

AND

gems_3000Match-

VendorProductVersionCPE
gems_3000_firmware*cpe:2.3:o:ge:ms_3000_firmware:*:*:*:*:*:*:*:*
gems_3000-cpe:2.3:h:ge:ms_3000:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ge	ms_3000_firmware	*	cpe:2.3:o:ge:ms_3000_firmware::::::::
ge	ms_3000	-	cpe:2.3:h:ge:ms_3000:-:::::::*

References

wid.cert-bund.de/.well-known/csaf/white/2022/bsi-2022-0005.json

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.002

Percentile

62.3%

JSON

Related for CVE-2022-43977