CVE-2022-24116: Weak Encryption
Published Dec 26, 2022
·Updated
Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II before 8.3.0.
Affected Software
20 affected components
General Electric Renewable Energy iNET/iNET II series radio firmware versions prior to rev. 8.3.0
General Electric Renewable Energy SD series radio firmware versions prior to rev. 6.4.7
General Electric Renewable Energy TD220X series radio firmware versions prior to rev. 2.0.16
General Electric Renewable Energy TD220MAX series radio firmware versions prior to rev. 1.2.6
GE Inet 900 Firmware<8.3.0
GE Inet 900
GE Inet Ii 900 Firmware<8.3.0
GE Inet Ii 900
GE Sd1 Firmware<=6.4.7
GE Sd1
GE Sd2 Firmware<6.4.7
GE Sd2
GE Sd4 Firmware<6.4.7
GE Sd4
GE Sd9 Firmware<6.4.7
GE Sd9
GE Td220max Firmware<1.2.6
GE TD220MAX
GE Td220x Firmware<2.0.16
GE TD220X
Remediation
Patch Available
Event History
Dec 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Aug 3, 2024
Data Sourced
via ICS·04:09 AM
SeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-24116.
2
Which General Electric (GE) Renewable Energy products are affected by this vulnerability?
This vulnerability affects GE iNET and iNET II products before version 8.3.0.
3
What is the severity level of CVE-2022-24116?
CVE-2022-24116 has a severity level of 9.8 (critical).
4
How can I fix this vulnerability?
To fix CVE-2022-24116, update your GE iNET and iNET II products to version 8.3.0 or later.
5
Where can I find more information about this vulnerability?
You can find more information about CVE-2022-24116 at the following link: [CISA Advisory ICSA-22-090-06](https://www.cisa.gov/uscert/ics/advisories/icsa-22-090-06).