GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.
References
| Link | Resource |
|---|---|
| http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf | Vendor Advisory |
| https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json | |
| https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a | |
| http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf | Vendor Advisory |
| https://ics-cert.us-cert.gov/advisories/ICSA-15-013-04 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
History
05 Nov 2025, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : unknown |
| CWE | CWE-400 |
Information
Published : 2015-01-17 02:59
Updated : 2025-11-05 00:15
NVD link : CVE-2014-5418
Mitre link : CVE-2014-5418
CVE.ORG link : CVE-2014-5418
JSON object : View
Products Affected
ge
- multilink_ml2400
- multilink_ml800_firmware
- multilink_ml1600
- multilink_ml810_firmware
- multilink_ml1200_firmware
- multilink_ml1200
- multilink_ml800
- multilink_ml3000
- multilink_ml3000_firmware
- multilink_ml1600_firmware
- multilink_ml3100
- multilink_ml810
- multilink_ml3100_firmware
- multilink_ml2400_firmware
