VULNERABILITY INTELLIGENCE

CVE-2022-24117

CVSS score9.8 CRITICAL

EPSS probability0.37%

CISA KEVNot currently listed

Published2022-12-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

Weakness classification

nvd@nist.gov: CWE-494
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-494

Primary references

cve@mitre.org — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource