Vulnerability Details CVE-2022-24117
Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.4%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-24117
-
cpe:2.3:h:ge:inet_900:-
-
cpe:2.3:h:ge:inet_ii_900:-
-
cpe:2.3:h:ge:sd1:-
-
cpe:2.3:h:ge:sd2:-
-
cpe:2.3:h:ge:sd4:-
-
cpe:2.3:h:ge:sd9:-
-
cpe:2.3:h:ge:td220max:-
-
cpe:2.3:h:ge:td220x:-
-
cpe:2.3:o:ge:inet_900_firmware:-
-
cpe:2.3:o:ge:inet_ii_900_firmware:-
-
cpe:2.3:o:ge:sd1_firmware:-
-
cpe:2.3:o:ge:sd1_firmware:6.4.7
-
cpe:2.3:o:ge:sd2_firmware:-
-
cpe:2.3:o:ge:sd4_firmware:-
-
cpe:2.3:o:ge:sd9_firmware:-
-
cpe:2.3:o:ge:td220max_firmware:-
-
cpe:2.3:o:ge:td220x_firmware:-