CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-24117
Critical (9.8) in ge. EPSS 0.4% chance of exploitation in the next 30 days.
Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
- CWE
- CWE-494
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ge:inet_900_firmware
- ge:inet_ii_900_firmware
- ge:sd1_firmware
- ge:sd2_firmware
- ge:sd4_firmware
- ge:sd9_firmware
- ge:td220max_firmware
- ge:td220x_firmware