CVE-2016-2310 General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, whi...
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ge multilink firmware | <= 5.5.0 | No fix listed |
| ge multilink firmware | <= 5.5.0k | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource