MEDIUM🇵🇱 Wersja polska

CVE-2015-3976

CVSS 5.4v3.0pub. 2017-08-28upd. 2026-05-13

Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

  • Ge Multilink Ml1200

    HW
    Ge
    all versions

  • Ge Multilink Ml1200 Firmware

    OS
    Ge
    4.2.1

  • Ge Multilink Ml1600

    HW
    Ge
    all versions

  • Ge Multilink Ml1600 Firmware

    OS
    Ge
    4.2.1

  • Ge Multilink Ml2400

    HW
    Ge
    all versions

  • Ge Multilink Ml2400 Firmware

    OS
    Ge
    4.2.1

  • Ge Multilink Ml3000

    HW
    Ge
    all versions

  • Ge Multilink Ml3000 Firmware

    OS
    Ge
    ≤ 5.2.0

  • Ge Multilink Ml3100

    HW
    Ge
    all versions

  • Ge Multilink Ml3100 Firmware

    OS
    Ge
    ≤ 5.2.0

  • Ge Multilink Ml800

    HW
    Ge
    all versions

  • Ge Multilink Ml800 Firmware

    OS
    Ge
    4.2.1

  • Ge Multilink Ml810

    HW
    Ge
    all versions

  • Ge Multilink Ml810 Firmware

    OS
    Ge
    5.2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2016-2310CRITICAL9.8PL ✓same product

Zakodowane na stałe hasła w przełącznikach GE Multilink umożliwiają zdalne przejęcie konfiguracji

CVE-2014-5419HIGH10.0same product

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, M...

CVE-2014-5418MEDIUM5.0same product

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, M...

CVE-2023-5908CRITICAL9.1PL ✓same vendor

Buffer overflow w KEPServerEX umożliwiający crash lub wyciek danych

CVE-2022-2825CRITICAL9.8PL ✓same vendor

RCE bez uwierzytelnienia w Kepware KEPServerEX — stack-based buffer overflow