CVE-2022-43977

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks access control.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jan 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-439783.7There is an improper authentication vulnerability in Pandora FMS v764. The application verifies that the user has a valid session when he is CVE-2022-439799.8There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that th CVE-2022-43987.8Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.CVE-2022-439805.4There is a stored cross-site scripting vulnerability in Pandora FMS v765 in the network maps editing functionality. An attacker could modify CVE-2022-439826.1In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argume CVE-2022-439838.2Browsershot version 3.57.2 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application do CVE-2022-439848.2Browsershot version 3.57.3 allows an external attacker to remotely obtain arbitrary local files. This is possible because the application do CVE-2022-439856.1In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.CVE-2022-439897.3Password recovery vulnerability in SICK SIM2x00 (ARM) Partnumber 1092673 and 1081902 with firmware version < 1.2.0 allows an unprivileged re CVE-2022-43999.8A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of CVE-2022-439907.3Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version <2.2.0 allows an unprivileged remote attacker to ga CVE-2022-439957.1Sudo 1.8.0 through 1.9.12, with the crypt() password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can re