9.1

CVE-2022-24118

Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ge ≫ Inet 900 Firmware Version < 8.3.0
   Ge ≫ Inet 900 Version-
Ge ≫ Inet Ii 900 Firmware Version < 8.3.0
   Ge ≫ Inet Ii 900 Version-
Ge ≫ Sd1 Firmware Version <= 6.4.7
   Ge ≫ Sd1 Version-
Ge ≫ Sd2 Firmware Version < 6.4.7
   Ge ≫ Sd2 Version-
Ge ≫ Sd4 Firmware Version < 6.4.7
   Ge ≫ Sd4 Version-
Ge ≫ Sd9 Firmware Version < 6.4.7
   Ge ≫ Sd9 Version-
Ge ≫ Td220max Firmware Version < 1.2.6
   Ge ≫ Td220max Version-
Ge ≫ Td220x Firmware Version < 2.0.16
   Ge ≫ Td220x Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.177
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06
Patch
Third Party Advisory
US Government Resource