CVE-2015-3976CWE-79

CVE-2015-3976: vulnerability in GE ML810/3000/3100 series switch

GE Multilink Cross-site Scripting

Published · Updated

Follow this CVE+ Monitor ML810/3000/3100 series switch+ Monitor Multilink ML800/1200/1600/2400

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 1.2%
Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.
AV:N/AC:L/Au:S/C:N/I:C/A:N
Affected products
GE · ML810/3000/3100 series switchGE · Multilink ML800/1200/1600/2400
Related CVEs — GE ML810/3000/3100 series switch

In the same product, most dangerous first.

CVE-2014-5418—GE Multilink Uncontrolled Resource ConsumptionEPSS 3.2%CVE-2014-5419—GE Multilink Use of Hard-coded Cryptographic KeyEPSS 2.4%