MEDIUM🇵🇱 Wersja polska

CVE-2014-5418

CVSS 5.0v2.0pub. 2015-01-17upd. 2026-05-06

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.

CVSS Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Ge Multilink Ml1200

    HW
    Ge
    all versions

  • Ge Multilink Ml1200 Firmware

    OS
    Ge
    ≤ 4.2.1

  • Ge Multilink Ml1600

    HW
    Ge
    all versions

  • Ge Multilink Ml1600 Firmware

    OS
    Ge
    ≤ 4.2.1

  • Ge Multilink Ml2400

    HW
    Ge
    all versions

  • Ge Multilink Ml2400 Firmware

    OS
    Ge
    ≤ 4.2.1

  • Ge Multilink Ml3000

    HW
    Ge
    all versions

  • Ge Multilink Ml3000 Firmware

    OS
    Ge
    ≤ 5.2.0

  • Ge Multilink Ml3100

    HW
    Ge
    all versions

  • Ge Multilink Ml3100 Firmware

    OS
    Ge
    ≤ 5.2.0

  • Ge Multilink Ml800

    HW
    Ge
    all versions

  • Ge Multilink Ml800 Firmware

    OS
    Ge
    ≤ 4.2.1

  • Ge Multilink Ml810

    HW
    Ge
    all versions

  • Ge Multilink Ml810 Firmware

    OS
    Ge
    ≤ 5.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2016-2310CRITICAL9.8PL ✓same product

Zakodowane na stałe hasła w przełącznikach GE Multilink umożliwiają zdalne przejęcie konfiguracji

CVE-2014-5419HIGH10.0same product

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, M...

CVE-2015-3976MEDIUM5.4same product

Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and ...

CVE-2023-5908CRITICAL9.1PL ✓same vendor

Buffer overflow w KEPServerEX umożliwiający crash lub wyciek danych

CVE-2022-2825CRITICAL9.8PL ✓same vendor

RCE bez uwierzytelnienia w Kepware KEPServerEX — stack-based buffer overflow