Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

ML810/3000/3100 series switch

Source -

CNA

CNA CVEs -

3

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
3Vulnerabilities found
CVE-2015-3976
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
ShareView Details
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
CVSS Score-6.8||MEDIUM
EPSS-0.33% / 55.55%
||
7 Day CHG~0.00%
Published-28 Aug, 2017 | 15:00
Updated-05 Nov, 2025 | 00:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
GE Multilink Cross-site Scripting

Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.

Action-Not Available
Vendor-geGE
Product-multilink_ml3100multilink_ml810multilink_ml800_firmwaremultilink_ml1600multilink_ml1200multilink_ml800multilink_ml3100_firmwaremultilink_ml810_firmwaremultilink_ml3000_firmwaremultilink_ml1200_firmwaremultilink_ml1600_firmwaremultilink_ml2400_firmwaremultilink_ml2400multilink_ml3000Multilink ML800/1200/1600/2400ML810/3000/3100 series switch
CWE ID-CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-5418
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
ShareView Details
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
CVSS Score-5||HIGH
EPSS-1.99% / 83.27%
||
7 Day CHG~0.00%
Published-17 Jan, 2015 | 02:00
Updated-05 Nov, 2025 | 00:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
GE Multilink Uncontrolled Resource Consumption

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.

Action-Not Available
Vendor-geGE
Product-multilink_ml3100multilink_ml810multilink_ml800_firmwaremultilink_ml1600multilink_ml1200multilink_ml2400_firmwaremultilink_ml3000_firmwaremultilink_ml810_firmwaremultilink_ml1200_firmwaremultilink_ml3100_firmwaremultilink_ml1600_firmwaremultilink_ml2400multilink_ml800multilink_ml3000Multilink ML800/1200/1600/2400ML810/3000/3100 series switch
CWE ID-CWE-400
Uncontrolled Resource Consumption
CVE-2014-5419
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
ShareView Details
Assigner-Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)
CVSS Score-10||MEDIUM
EPSS-1.38% / 80.00%
||
7 Day CHG~0.00%
Published-17 Jan, 2015 | 02:00
Updated-05 Nov, 2025 | 00:15
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
GE Multilink Use of Hard-coded Cryptographic Key

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it easier for remote attackers to obtain the cleartext content of network traffic by reading this key from a firmware image and then sniffing the network.

Action-Not Available
Vendor-geGE
Product-multilink_ml3100multilink_ml810multilink_ml800_firmwaremultilink_ml1600multilink_ml1200multilink_ml800multilink_ml3000_firmwaremultilink_ml810_firmwaremultilink_ml3100_firmwaremultilink_ml2400_firmwaremultilink_ml1600_firmwaremultilink_ml2400multilink_ml1200_firmwaremultilink_ml3000Multilink ML800/1200/1600/2400ML810/3000/3100 series switch
CWE ID-CWE-321
Use of Hard-coded Cryptographic Key