PT-2022-3899 · General Electric · Inet Ii+1

Reid Wightman · Published 2022-03-31 · Updated 2025-04-12 · CVE-2022-24116

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions General Electric Renewable Energy iNET and iNET II versions prior to 8.3.0

Description The issue is related to inadequate encryption strength in the software of General Electric Renewable Energy's iNET and iNET II products. This could allow an attacker to compromise the target system.

Recommendations For versions prior to 8.3.0, update to version 8.3.0 or later to resolve the issue.

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-325

CWE-326

Related Identifiers

BDU:2022-04710

CVE-2022-24116

Affected Products

Inet

Inet Ii

References · 7

• https://osv.dev/vulnerability/CVE-2022-24116 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-22-090-06 · Patch
• https://bdu.fstec.ru/vul/2022-04710 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-24116 · Security Note
• https://t.me/cibsecurity/55331 · Telegram Post
• https://t.me/cvenotify/118968 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2022040406 · Note