PT-2015-3805 · Ge · Ge Multilink Ml1600+6

Publicado 2015-01-17 · Atualizado 2025-11-05 · CVE-2014-5418

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in resource consumption or reboot, via crafted packets.

Recommendations For GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier, update to a version later than 4.2.1. For GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier, update to a version later than 5.2.0.

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

CWE-399

Identificadores relacionados

CVE-2014-5418

Produtos afetados

Ge Multilink Ml1200

Ge Multilink Ml1600

Ge Multilink Ml2400

Ge Multilink Ml3000

Ge Multilink Ml3100

Ge Multilink Ml800

Ge Multilink Ml810

Referências · 6

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-5418 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-013-04 · Nota
• http://gedigitalenergy.com/products/support/multilink/MLSB1214.pdf · Aviso do Fabricante
• https://cisa.gov/news-events/ics-advisories/icsa-15-013-04a · Nota
• https://t.me/cveNotify/141748 · Publicação no Telegram