Описание
An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks access control.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.7.6.25p0_3.2.2.17p0_4.7p0 (исключая)
Одновременно
cpe:2.3:o:ge:ms_3000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:ms_3000:-:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00344
Низкий
9.8 Critical
CVSS3
Дефекты
NVD-CWE-Other
CWE-284
Связанные уязвимости
CVSS3: 9.8
github
около 3 лет назад
An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn service) lacks access control.
EPSS
Процентиль: 57%
0.00344
Низкий
9.8 Critical
CVSS3
Дефекты
NVD-CWE-Other
CWE-284