CVE-2022-24119

Critical

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration…

mitre·CWE-829·Published 2022-12-26

CVSS

9.8

EPSS

0.01

KEV

Exploits

cve.orgen

185 chars

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0.

NVDen

185 chars

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0.

NVDes

209 chars

Ciertos productos de General Electric Renewable Energy tienen una función oculta para el acceso remoto no autenticado al shell de configuración del dispositivo. Esto afecta a iNET e iNET II anteriores a 8.3.0.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	9.8	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H