Critical severity9.8NVD Advisory· Published Dec 26, 2022· Updated Jun 17, 2026

CVE-2022-24117

Description

Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

Affected products

General Electric Renewable Energy/iNETdescription
General Electric (GE)/SDllm-create
Range: <6.4.7
General Electric (GE)/TD220MAXllm-create
Range: <1.2.6
General Electric (GE)/iNET IIllm-fuzzy
Range: <8.3.0
General Electric (GE)/TD220Xllm-fuzzy
Range: <2.0.16

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-090-06nvdPatchThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000