CVE-2014-5419

CVE-2014-5419 affects GE Multilink switches (ML800/1200/1600/2400 on firmware 4.2.1 and earlier; ML810/3000/3100 on firmware 5.2.0 and earlier). Root cause: use of the same RSA private key across installations, enabling an attacker to decrypt SSL traffic by extracting the key from firmware. Impac...

CVE-2015-3976

The CVE-2015-3976 issue is a Cross-site Scripting (XSS) vulnerability affecting GE Multilink switches: ML800/1200/1600/2400 (firmware ≤ 4.2.1) and ML810/3000/3100 (firmware ≤ 5.2.0). The underlying problem is improper neutralization of input during web page generation in the switch web interface,...

CVE-2014-5418

CVE-2014-5418 affects GE Multilink ML800/ML1200/ML1600/ML2400 (firmware 4.2.1 and earlier) and ML810/ML3000/ML3100 (firmware 5.2.0 and earlier). The vulnerability enables remote attackers to cause a denial of service by sending crafted packets that exhaust resources or reboot the switch. The ICS-...