CRITICAL🇵🇱 Wersja polska

CVE-2022-24117

CVSS 9.8v3.1pub. 2022-12-26upd. 2025-04-12

Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ge Inet 900

    HW
    Ge
    all versions

  • Ge Inet 900 Firmware

    OS
    Ge
    < 8.3.0

  • Ge Inet Ii 900

    HW
    Ge
    all versions

  • Ge Inet Ii 900 Firmware

    OS
    Ge
    < 8.3.0

  • Ge Sd1

    HW
    Ge
    all versions

  • Ge Sd1 Firmware

    OS
    Ge
    ≤ 6.4.7

  • Ge Sd2

    HW
    Ge
    all versions

  • Ge Sd2 Firmware

    OS
    Ge
    < 6.4.7

  • Ge Sd4

    HW
    Ge
    all versions

  • Ge Sd4 Firmware

    OS
    Ge
    < 6.4.7

  • Ge Sd9

    HW
    Ge
    all versions

  • Ge Sd9 Firmware

    OS
    Ge
    < 6.4.7

  • Ge Td220max

    HW
    Ge
    all versions

  • Ge Td220max Firmware

    OS
    Ge
    < 1.2.6

  • Ge Td220x

    HW
    Ge
    all versions

  • Ge Td220x Firmware

    OS
    Ge
    < 2.0.16
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-24116CRITICAL9.8PL ✓same product

Niewystarczająca siła szyfrowania w produktach GE Renewable Energy iNET/iNET II

CVE-2022-24118CRITICAL9.1PL ✓same product

GE Renewable Energy – wymuszony reset do ustawień fabrycznych przez sieć

CVE-2022-24119CRITICAL9.8PL ✓same product

Ukryta funkcja zdalnego dostępu w urządzeniach GE Renewable Energy iNET/iNET II

CVE-2022-24120MEDIUM4.6same product

Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects i...

CVE-2023-5908CRITICAL9.1PL ✓same vendor

Buffer overflow w KEPServerEX umożliwiający crash lub wyciek danych