CRITICAL🇵🇱 Wersja polska

CVE-2016-2310

CVSS 9.8v3.1pub. 2016-06-09upd. 2026-05-06

General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ge Multilink Firmware

    OS
    Ge
    ≤ 5.5.0≤ 5.5.0k

  • Ge Multilink Ml1200

    HW
    Ge
    all versions

  • Ge Multilink Ml1600

    HW
    Ge
    all versions

  • Ge Multilink Ml2400

    HW
    Ge
    all versions

  • Ge Multilink Ml3000

    HW
    Ge
    all versions

  • Ge Multilink Ml3100

    HW
    Ge
    all versions

  • Ge Multilink Ml800

    HW
    Ge
    all versions

  • Ge Multilink Ml810

    HW
    Ge
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2014-5419HIGH10.0same product

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, M...

CVE-2015-3976MEDIUM5.4same product

Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and ...

CVE-2014-5418MEDIUM5.0same product

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, M...

CVE-2023-5908CRITICAL9.1PL ✓same vendor

Buffer overflow w KEPServerEX umożliwiający crash lub wyciek danych

CVE-2022-2825CRITICAL9.8PL ✓same vendor

RCE bez uwierzytelnienia w Kepware KEPServerEX — stack-based buffer overflow