CVE-2022-24117: Ge Inet 900 Firmware

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Certain General Electric Renewable Energy products download firmware without an integrity check. This affects iNET and iNET II before 8.3.0, SD before 6.4.7, TD220X before 2.0.16, and TD220MAX before 1.2.6.

Affected products

• Ge Inet 900 Firmware: before 8.3.0 (fixed in 8.3.0)
• Ge Inet Ii 900 Firmware: before 8.3.0 (fixed in 8.3.0)
• Ge SD1 Firmware: up to and including 6.4.7
• Ge SD2 Firmware: before 6.4.7 (fixed in 6.4.7)
• Ge SD4 Firmware: before 6.4.7 (fixed in 6.4.7)
• Ge SD9 Firmware: before 6.4.7 (fixed in 6.4.7)
• Ge TD220MAX Firmware: before 1.2.6 (fixed in 1.2.6)
• Ge TD220X Firmware: before 2.0.16 (fixed in 2.0.16)

Published 2022-12-26. Last modified 2026-06-17.