Skip to content
OpenAdvisories
Critical 1 exploited CVE ICSA-22-090-06 6 CVEs

General Electric Renewable Energy MDS Radios

Published Mar 31, 2022 · Updated Mar 31, 2022

Vendor: General Electric (GE) Product: iNET/iNET II series radio Product: SD series radio Product: TD220MAX series radio Product: TD220X series radio

Summary

Successful exploitation of these vulnerabilities could allow an attacker to control the configuration of the radio, join the network without proper authorization, or keep valid users from using the system correctly.

Vulnerabilities 6

  • High 8.1
    CVE-2017-17562 Exploited Public exploit Scanner template EPSS 97%

    Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. …

    KEV Dec 10, 2021
  • Critical 9.8
    CVE-2022-24116

    Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II b…

  • Critical 9.8
    CVE-2022-24117

    Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and …

  • Critical 9.8
    CVE-2022-24119

    Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the devic…

  • Critical 9.1
    CVE-2022-24118

    Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory d…

  • Medium 4.6
    CVE-2022-24120

    Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and i…

Revision history

  1. #1

    ICSA-22-090-06 GE Renewable Energy MDS Radios

References