CVE-2022-24119

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0.
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06 Patch Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:ge:inet_900_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:inet_900:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:ge:inet_ii_900_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:inet_ii_900:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:ge:sd1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:sd1:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:ge:sd2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:sd2:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:ge:sd4_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:sd4:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:ge:sd9_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:sd9:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:ge:td220max_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:td220max:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:ge:td220x_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:td220x:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2022-12-26 05:15

Updated : 2024-02-28 19:51


NVD link : CVE-2022-24119

Mitre link : CVE-2022-24119

CVE.ORG link : CVE-2022-24119


JSON object : View

Products Affected

ge

  • sd2_firmware
  • sd2
  • sd9
  • td220x_firmware
  • sd1
  • inet_900
  • sd4_firmware
  • sd4
  • td220max
  • sd1_firmware
  • inet_ii_900_firmware
  • sd9_firmware
  • inet_ii_900
  • td220x
  • inet_900_firmware
  • td220max_firmware
CWE
CWE-829

Inclusion of Functionality from Untrusted Control Sphere