Critical severity9.1NVD Advisory· Published Dec 26, 2022· Updated Jun 17, 2026

CVE-2022-24118

Description

Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

Affected products

General Electric (GE)/iNET IIcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <8.3.0
Ge/Inet 900 Firmware
cpe:2.3:o:ge:inet_900_firmware:*:*:*:*:*:*:*:*
Range: <8.3.0
Ge/Inet Ii 900 Firmware
cpe:2.3:o:ge:inet_ii_900_firmware:*:*:*:*:*:*:*:*
Range: <8.3.0
Ge/Sd1 Firmware
cpe:2.3:o:ge:sd1_firmware:*:*:*:*:*:*:*:*
Range: <=6.4.7
Ge/Sd2 Firmware
cpe:2.3:o:ge:sd2_firmware:*:*:*:*:*:*:*:*
Range: <6.4.7
Ge/Sd4 Firmware
cpe:2.3:o:ge:sd4_firmware:*:*:*:*:*:*:*:*
Range: <6.4.7
Ge/Sd9 Firmware
cpe:2.3:o:ge:sd9_firmware:*:*:*:*:*:*:*:*
Range: <6.4.7
Ge/Td220max Firmware
cpe:2.3:o:ge:td220max_firmware:*:*:*:*:*:*:*:*
Range: <1.2.6
Ge/Td220x Firmware
cpe:2.3:o:ge:td220x_firmware:*:*:*:*:*:*:*:*
Range: <2.0.16
General Electric (GE)/TD220Xllm-fuzzy
Range: <2.0.16
General Electric (GE)/SDllm-create
Range: <6.4.7
General Electric (GE)/TD220MAXllm-fuzzy
Range: <1.2.6

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-090-06nvdPatchThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000