HIGH🇵🇱 Wersja polska

CVE-2014-5419

CVSS 10.0v2.0pub. 2015-01-17upd. 2026-05-06

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it easier for remote attackers to obtain the cleartext content of network traffic by reading this key from a firmware image and then sniffing the network.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Ge Multilink Ml1200

    HW
    Ge
    all versions

  • Ge Multilink Ml1200 Firmware

    OS
    Ge
    ≤ 4.2.1

  • Ge Multilink Ml1600

    HW
    Ge
    all versions

  • Ge Multilink Ml1600 Firmware

    OS
    Ge
    ≤ 4.2.1

  • Ge Multilink Ml2400

    HW
    Ge
    all versions

  • Ge Multilink Ml2400 Firmware

    OS
    Ge
    ≤ 4.2.1

  • Ge Multilink Ml3000

    HW
    Ge
    all versions

  • Ge Multilink Ml3000 Firmware

    OS
    Ge
    ≤ 5.2.0

  • Ge Multilink Ml3100

    HW
    Ge
    all versions

  • Ge Multilink Ml3100 Firmware

    OS
    Ge
    ≤ 5.2.0

  • Ge Multilink Ml800

    HW
    Ge
    all versions

  • Ge Multilink Ml800 Firmware

    OS
    Ge
    ≤ 4.2.1

  • Ge Multilink Ml810

    HW
    Ge
    all versions

  • Ge Multilink Ml810 Firmware

    OS
    Ge
    ≤ 5.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2016-2310CRITICAL9.8PL ✓same product

Zakodowane na stałe hasła w przełącznikach GE Multilink umożliwiają zdalne przejęcie konfiguracji

CVE-2015-3976MEDIUM5.4same product

Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and ...

CVE-2014-5418MEDIUM5.0same product

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, M...

CVE-2023-5908CRITICAL9.1PL ✓same vendor

Buffer overflow w KEPServerEX umożliwiający crash lub wyciek danych

CVE-2022-2825CRITICAL9.8PL ✓same vendor

RCE bez uwierzytelnienia w Kepware KEPServerEX — stack-based buffer overflow