CVE-2014-5419

🗓️ 17 Jan 2015 02:00:00Reported by icscertType

GE Multilink switches use same RSA key, easier for attackers to obtain cleartext network traffic

Reporter	Title	Published	Views	Family All 6
Tenable Nessus	GE Multilink Swtiches Hardcoded Encryption Key	8 May 201900:00	–	nessus
CNVD	Built-in Key Security Bypass Vulnerability in Multiple General Electric (GE) Products	16 Jan 201500:00	–	cnvd
Cvelist	CVE-2014-5419 GE Multilink Use of Hard-coded Cryptographic Key	17 Jan 201502:00	–	cvelist
EUVD	EUVD-2014-5307	7 Oct 202500:30	–	euvd
NVD	CVE-2014-5419	17 Jan 201502:59	–	nvd
Prion	Code injection	17 Jan 201502:59	–	prion

NVD

Vulners

Node

ge multilink_ml3100_firmwareRange≤5.2.0

AND

ge multilink_ml3100

Node

ge multilink_ml3000_firmwareRange≤5.2.0

AND

ge multilink_ml3000

Node

ge multilink_ml810_firmwareRange≤5.2.0

AND

ge multilink_ml810Match-

Node

ge multilink_ml1600_firmwareRange≤4.2.1

AND

ge multilink_ml1600Match-

Node

ge multilink_ml800_firmwareRange≤4.2.1

AND

ge multilink_ml800Match-

Node

ge multilink_ml2400_firmwareRange≤4.2.1

AND

ge multilink_ml2400Match-

Node

ge multilink_ml1200_firmwareRange≤4.2.1

AND

ge multilink_ml1200Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Multilink ML800/1200/1600/2400",
    "vendor": "GE",
    "versions": [
      {
        "lessThanOrEqual": "4.2.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "ML810/3000/3100 series switch",
    "vendor": "GE",
    "versions": [
      {
        "lessThanOrEqual": "5.2.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
gedigitalenergy	www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-15-013-04

06 May 2026 22:30Current

6.8Medium risk

Vulners AI Score6.8

CVSS 25 - 10

EPSS0.01383

cve-2014-5419 ge multilink switches rsa private key firmware vulnerability network traffic remote attackers