GE MDS Radio Network and Serial Vulnerabilities
Limited Threat
CVE ID
CVE-2017-17562
CVE-2022-24119
CVE-2022-24116
CVE-2022-24118
CVE-2022-24120
CVE-2022-24117
Vunerability Type
Unauthenticated Remote Code Execution
iNET and iNET-II Factory Backdoor Use
iNET and iNET-II Wi-Fi Security Weaknesses
Factory Reset Authentication System
iNET and iNET-II Plaintext storage of system credentials
Unprotected Firmware Update
CVSS3 Score
10
10
8.8
6.8
6.8
9.1
CVSSv3 Vector
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Affecting
Mitigation
GE has planned release v8.3.0 to remediate these issues.
03/31/2022