Hardcoded credentials

2016-06-0910:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.4%

JSON

General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.

CPENameOperatorVersion
multilink_firmwarele5.5.0
multilink_firmwareeq<= 5.5.0k

CPE	Name	Operator	Version
	multilink_firmware	le	5.5.0
	multilink_firmware	eq	<= 5.5.0k

References

ics-cert.us-cert.gov/advisories/ICSA-16-154-01