GCVE - cpe:2.3:h:ge:multilink_ml810:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:ge:multilink_ml810:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Ge (`889d94a1-c6d7-5857-8fdf-da634b4dfc4f`)
Product	Multilink Ml810 (`92287afe-39ce-5bca-bb86-5d37db841be8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-2310`	not_vulnerable	2026-06-08 05:07:34.076460	Details available General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface. Published: 2016-06-09T10:00:00.000Z Updated: 2024-08-05T23:24:48.970Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3976`	not_vulnerable	2026-06-08 05:06:38.930345	GE Multilink Cross-site Scripting Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier. Published: 2017-08-28T15:00:00.000Z Updated: 2025-11-04T23:33:49.742Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5419`	vulnerable	2026-06-08 05:05:47.884775	GE Multilink Use of Hard-coded Cryptographic Key GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier use the same RSA private key across different customers' installations, which makes it easier for remote attackers to obtain the cleartext content of network traffic by reading this key from a firmware image and then sniffing the network. Published: 2015-01-17T02:00:00.000Z Updated: 2025-11-04T23:32:07.026Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-5418`	vulnerable	2026-06-08 05:05:47.876503	GE Multilink Uncontrolled Resource Consumption GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets. Published: 2015-01-17T02:00:00.000Z Updated: 2025-11-04T23:30:32.557Z Open on db.gcve.eu Reference links https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.