Sd1 Firmware vulnerabilities

3 known vulnerabilities in Sd1 Firmware from Ge. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Inet 900 Firmware: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2022-24119Dec 26, 2022Ge

  Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0.

• 9.1 Critical severity

  Inet 900 Firmware: Uncontrolled Resource Consumption

  CVE-2022-24118Dec 26, 2022Ge

  Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

• 9.8 Critical severity

  Inet 900 Firmware: Download of Code Without Integrity Check

  CVE-2022-24117Dec 26, 2022Ge

  Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.