CVE-2022-24120

Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iNET II before 8.3.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
geinet_900_firmware
𝑥
< 8.3.0
geinet_ii_900_firmware
𝑥
< 8.3.0
gesd1_firmware
𝑥
≤ 6.4.7
gesd2_firmware
𝑥
< 6.4.7
gesd4_firmware
𝑥
< 6.4.7
gesd9_firmware
𝑥
< 6.4.7
getd220max_firmware
𝑥
< 1.2.6
getd220x_firmware
𝑥
< 2.0.16
𝑥
= Vulnerable software versions