CVE-2022-43977: Critical severity ge ms 3000 firmware vulnerability
Published Jan 17, 2023
·Updated
An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p03.2.2.17p04.7p0. The debug port accessible via TCP (a qconn service) lacks access control.
Affected Software
4 affected components
GE Ms 3000 Firmware<3.7.6.25p0_3.2.2.17p0_4.7p0
GE Ms 3000
All of the following
GE Ms 3000 Firmware<3.7.6.25p0_3.2.2.17p0_4.7p0
GE Ms 3000
Event History
Jan 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-43977.
2
What is the severity of CVE-2022-43977?
The severity of CVE-2022-43977 is critical with a CVSS score of 9.8.
3
Which devices are affected by CVE-2022-43977?
GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0 are affected by CVE-2022-43977.
4
What is the issue with the affected devices?
The debug port accessible via TCP (a qconn service) lacks access control.
5
How can I fix CVE-2022-43977?
To fix CVE-2022-43977, update the GE Grid Solutions MS3000 firmware to version 3.7.6.25p0_3.2.2.17p0_4.7p0 or later.