Critical severity9.1NVD Advisory· Published Dec 26, 2022· Updated Jun 17, 2026

CVE-2022-24118

Description

Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

Affected products

General Electric Renewable Energy/iNETdescription
General Electric (GE)/SDllm-create
Range: <6.4.7
General Electric (GE)/iNET IIllm-fuzzy
Range: <8.3.0
General Electric (GE)/TD220Xllm-fuzzy
Range: <2.0.16
General Electric (GE)/TD220MAXllm-fuzzy
Range: <1.2.6

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-090-06nvdPatchThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000