CRITICAL🇵🇱 Wersja polska

CVE-2022-24118

CVSS 9.1v3.1pub. 2022-12-26upd. 2025-04-12

Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Ge Inet 900
HW
Ge
wszystkie wersje
Ge Inet 900 Firmware
OS
Ge
< 8.3.0
Ge Inet Ii 900
HW
Ge
wszystkie wersje
Ge Inet Ii 900 Firmware
OS
Ge
< 8.3.0
Ge Sd1
HW
Ge
wszystkie wersje
Ge Sd1 Firmware
OS
Ge
≤ 6.4.7
Ge Sd2
HW
Ge
wszystkie wersje
Ge Sd2 Firmware
OS
Ge
< 6.4.7
Ge Sd4
HW
Ge
wszystkie wersje
Ge Sd4 Firmware
OS
Ge
< 6.4.7
Ge Sd9
HW
Ge
wszystkie wersje
Ge Sd9 Firmware
OS
Ge
< 6.4.7
Ge Td220max
HW
Ge
wszystkie wersje
Ge Td220max Firmware
OS
Ge
< 1.2.6
Ge Td220x
HW
Ge
wszystkie wersje
Ge Td220x Firmware
OS
Ge
< 2.0.16

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

References

www.cisa.gov/uscert/ics/advisories/icsa-22-090-06…

www.cisa.gov/uscert/ics/advisories/icsa-22-090-06…

Related vulnerabilities

CVE-2022-24116CRITICAL9.8ten sam produkt

Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and ...

CVE-2022-24117CRITICAL9.8ten sam produkt

Certain General Electric Renewable Energy products download firmware without an integrity check. This affects ...

CVE-2022-24119CRITICAL9.8ten sam produkt

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to ...

CVE-2022-24120MEDIUM4.6ten sam produkt

Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects i...

CVE-2023-5908CRITICAL9.1PL ✓ten sam vendor

Buffer overflow w KEPServerEX umożliwiający crash lub wyciek danych