CVE-2014-5418

G

E Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:ge:multilink_ml810_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:multilink_ml810:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:ge:multilink_ml1600_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:multilink_ml1600:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:ge:multilink_ml1200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:multilink_ml1200:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:ge:multilink_ml3000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:multilink_ml3000:*:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:ge:multilink_ml2400_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:multilink_ml2400:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:ge:multilink_ml3100_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:multilink_ml3100:*:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:ge:multilink_ml800_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ge:multilink_ml800:-:*:*:*:*:*:*:*

History

05 Nov 2025, 00:15

Type Values Removed Values Added
References
  • () https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json -
  • () https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a -
CWE CWE-400
CVSS v2 : 7.8
v3 : unknown
v2 : 5.0
v3 : unknown

21 Nov 2024, 02:12

Type Values Removed Values Added
References () http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf - Vendor Advisory () http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf - Vendor Advisory
References () https://ics-cert.us-cert.gov/advisories/ICSA-15-013-04 - Third Party Advisory, US Government Resource () https://ics-cert.us-cert.gov/advisories/ICSA-15-013-04 - Third Party Advisory, US Government Resource