← Database

CVE-2022-24117

CRITICAL CVSS: 9.8 Published: 2022-12-26 Modified: 2026-06-17

Description

Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

Affected Platforms

Ge Inet 900 FirmwareGe Sd1Ge Td220XGe Inet Ii 900Ge Td220X FirmwareGe Sd2 FirmwareGe Td220Max FirmwareGe Sd9 FirmwareGe Sd2Ge Sd4

Weakness Type

CWE-494, CWE-494

References