CVE-2022-24120

Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iNET II before 8.3.0.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.6 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
4.6 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
VendorProductVersion
geinet_900_firmware
𝑥
< 8.3.0
geinet_ii_900_firmware
𝑥
< 8.3.0
gesd1_firmware
𝑥
≤ 6.4.7
gesd2_firmware
𝑥
< 6.4.7
gesd4_firmware
𝑥
< 6.4.7
gesd9_firmware
𝑥
< 6.4.7
getd220max_firmware
𝑥
< 1.2.6
getd220x_firmware
𝑥
< 2.0.16
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06
https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06