Medium severity4.6NVD Advisory· Published Dec 26, 2022· Updated Jun 17, 2026

CVE-2022-24120

Description

Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iNET II before 8.3.0.

General Electric (GE)/iNET IIcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <8.3.0
Ge/Inet 900 Firmware
cpe:2.3:o:ge:inet_900_firmware:*:*:*:*:*:*:*:*
Range: <8.3.0
Ge/Inet Ii 900 Firmware
cpe:2.3:o:ge:inet_ii_900_firmware:*:*:*:*:*:*:*:*
Range: <8.3.0
Ge/Sd1 Firmware
cpe:2.3:o:ge:sd1_firmware:*:*:*:*:*:*:*:*
Range: <=6.4.7
Ge/Sd2 Firmware
cpe:2.3:o:ge:sd2_firmware:*:*:*:*:*:*:*:*
Range: <6.4.7
Ge/Sd4 Firmware
cpe:2.3:o:ge:sd4_firmware:*:*:*:*:*:*:*:*
Range: <6.4.7
Ge/Sd9 Firmware
cpe:2.3:o:ge:sd9_firmware:*:*:*:*:*:*:*:*
Range: <6.4.7
Ge/Td220max Firmware
cpe:2.3:o:ge:td220max_firmware:*:*:*:*:*:*:*:*
Range: <1.2.6
Ge/Td220x Firmware
cpe:2.3:o:ge:td220x_firmware:*:*:*:*:*:*:*:*
Range: <2.0.16

www.cisa.gov/uscert/ics/advisories/icsa-22-090-06nvdPatchThird Party AdvisoryUS Government Resource

No linked articles in our index yet.