ICSA-22-090-06

icsaUScisa_csaf_ot

General Electric Renewable Energy MDS Radios

Advisory ansehen veröffentlicht 2022-03-31

Successful exploitation of these vulnerabilities could allow an attacker to control the configuration of the radio, join the network without proper authorization, or keep valid users from using the system correctly.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-24120USmedium4.6OT erhöht—
Certain General Electric Renewable Energy products store cleartext credentials in flash memory. This affects iNET and iNET II before 8.3.0.
CVE-2022-24119UScritical9.8—
Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8…
CVE-2022-24118UScritical9.1—
Certain General Electric Renewable Energy products allow attackers to use a code to trigger a reboot into the factory default configuration. This affects iNET and iNET II before 8.…
CVE-2022-24117UScritical9.8OT erhöht—
Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16,…
CVE-2022-24116UScritical9.8—
Certain General Electric Renewable Energy products have inadequate encryption strength. This affects iNET and iNET II before 8.3.0.
CVE-2017-17562UShigh8.1OT kritischKEV
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CG…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (48)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan