CVE-2014-5418CWE-400

CVE-2014-5418: vulnerability in GE ML810/3000/3100 series switch

GE Multilink Uncontrolled Resource Consumption

Published · Updated

Follow this CVE+ Monitor ML810/3000/3100 series switch+ Monitor Multilink ML800/1200/1600/2400

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 3.2%
GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.
AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected products
GE · ML810/3000/3100 series switchGE · Multilink ML800/1200/1600/2400
Related CVEs — GE ML810/3000/3100 series switch

In the same product, most dangerous first.

CVE-2014-5419—GE Multilink Use of Hard-coded Cryptographic KeyEPSS 2.4%CVE-2015-3976—GE Multilink Cross-site ScriptingEPSS 1.2%