CVE-2014-5418
GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-400, CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ge:multilink_ml1200
- ge:multilink_ml1200_firmware
- ge:multilink_ml1600
- ge:multilink_ml1600_firmware
- ge:multilink_ml2400
- ge:multilink_ml2400_firmware
- ge:multilink_ml3000
- ge:multilink_ml3000_firmware
- ge:multilink_ml3100
- ge:multilink_ml3100_firmware
- ge:multilink_ml800
- ge:multilink_ml800_firmware
- ge:multilink_ml810
- ge:multilink_ml810_firmware
References
- http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a
- http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf
- https://ics-cert.us-cert.gov/advisories/ICSA-15-013-04