CVE-2022-24119: Inclusion of Functionality from Untrusted Control Sphere

Certain General Electric Renewable Energy products have a hidden feature for unauthenticated remote access to the device configuration shell. This affects iNET and iNET II before 8.3.0...

CVE-2022-24119

The CVE-2022-24119 entry affects General Electric Renewable Energy iNET and iNET II radios with firmware before 8.3.0, due to a hidden, undocumented feature that allows unauthenticated remote access to the device configuration shell (CWE-912). This can enable full control of the configuration ove...