PT-2015-3805 · Ge · Ge Multilink Ml1600+6

Published 2015-01-17 · Updated 2025-11-05 · CVE-2014-5418

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in resource consumption or reboot, via crafted packets.

Recommendations For GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier, update to a version later than 4.2.1. For GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier, update to a version later than 5.2.0.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-399

Related Identifiers

CVE-2014-5418

Affected Products

Ge Multilink Ml1200

Ge Multilink Ml1600

Ge Multilink Ml2400

Ge Multilink Ml3000

Ge Multilink Ml3100

Ge Multilink Ml800

Ge Multilink Ml810

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2014-5418 · Security Note
• http://gedigitalenergy.com/products/support/multilink/MLSB1214.pdf · Vendor Advisory
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-013-04 · Note
• https://cisa.gov/news-events/ics-advisories/icsa-15-013-04a · Note
• https://t.me/cveNotify/141748 · Telegram Post