VDB
CVE-2022-24117
CVE-2022-24117
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.
EPSS 0.35% · 26.3th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.35%
26.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ge | sd9_firmware | 0 |
| ge | sd4_firmware | 0 |
| ge | sd2_firmware | 0 |
| ge | td220x_firmware | 0 |
| ge | sd1_firmware | 0 |
| n/a | n/a | n/a |
| ge | inet_ii_900_firmware | 0 |
| ge | td220max_firmware | 0 |
| ge | inet_900_firmware | 0 |
Timeline
- Dec 26, 2022 CVE Published
- Dec 26, 2022 EPSS Score
- Feb 6, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 20, 2023 EPSS Score
- Apr 30, 2023 EPSS Score
- Jun 11, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
- Sep 3, 2023 EPSS Score
- Oct 15, 2023 EPSS Score
- Nov 25, 2023 EPSS Score
- Jan 6, 2024 EPSS Score