Resource exhaustion in General Electric Company products - CVE-2022-24118

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources. A remote attacker on the local network can use the authentication code to cause affected series radios to reset back to the factory default configuration and reboot.

Affected software

How to mitigate CVE-2022-24118

External References

• https://ics-cert.us-cert.gov/advisories/icsa-22-090-06

Related Security Bulletins

• Multiple vulnerabilities in General Electric Renewable Energy MDS Radios