GE ML800 Switch Detection

Binary data 761991.prm...

CVE-2015-3976

Cross-site scripting XSS vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier...

CVE-2015-3976

The CVE-2015-3976 issue is a Cross-site Scripting (XSS) vulnerability affecting GE Multilink switches: ML800/1200/1600/2400 (firmware ≤ 4.2.1) and ML810/3000/3100 (firmware ≤ 5.2.0). The underlying problem is improper neutralization of input during web page generation in the switch web interface,...

CVE-2015-3976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier...

PT-2017-6716

Name of the Vulnerable Software and Affected Versions GE Multilink ML810/3000/3100 series switch versions 5.2.0 and earlier GE Multilink ML800/1200/1600/2400 versions 4.2.1 and earlier Description The issue is related to a cross-site scripting XSS vulnerability. Cross-site scripting is a type of...

CVE-2016-2310

The CVE-2016-2310 issue affects GE Multilink switches (ML800, ML1200, ML1600, ML2400) with firmware before 5.5.0 and (ML810, ML3000, ML3100) with firmware before 5.5.0k. The underlying root cause is hardcoded credentials that allow remote attackers to modify configuration settings via the web int...

PT-2016-5113

Name of the Vulnerable Software and Affected Versions General Electric GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware prior to 5.5.0 General Electric GE Multilink ML810, ML3000, and ML3100 switches with firmware prior to 5.5.0k Description The issue allows remote attackers ...

CVE-2016-2310: Use of Hard-coded Credentials

General Electric GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface...

Multiple GE Switches Cross-Site Scripting Vulnerability

GE Multilink ML800 and others are Ethernet switch products from General Electric GE. A cross-site scripting vulnerability exists in multiple GE switches. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML...

CVE-2014-5418

CVE-2014-5418 affects GE Multilink ML800/ML1200/ML1600/ML2400 (firmware 4.2.1 and earlier) and ML810/ML3000/ML3100 (firmware 5.2.0 and earlier). The vulnerability enables remote attackers to cause a denial of service by sending crafted packets that exhaust resources or reboot the switch. The ICS-...

CVE-2014-5418: Uncontrolled Resource Consumption

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service resource consumption or reboot via crafted packets...

PT-2015-3806

Name of the Vulnerable Software and Affected Versions GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier Description The issue allows remote attackers to obtain the cleartext content of...

PT-2015-3805

Name of the Vulnerable Software and Affected Versions GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier Description The issue allows remote attackers to cause a denial of service, resulting...

General Electric（GE）industrial control switches exposed high-risk vulnerabilities-vulnerability warning-the black bar safety net

Security researchers recently in the General Electric（GE MultiLink ML800 series switches found on the 2 high-risk vulnerabilities, an attacker can exploit the vulnerability in the case of unauthorized crack of network traffic and to launch a DOS attack. Discover vulnerabilities The MultiLink ML80...