CVE-2014-5418

GE Multilink Uncontrolled Resource Consumption

State: Published
Severity: 5.0 Medium
Published: Jan 17, 2015
Updated: Nov 4, 2025
Reserved: Aug 22, 2014

Description

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.

Scores

CVSS	Score	Vector	Source
2.0	5.0 Medium	AV:N/AC:L/Au:N/C:N/I:N/A:P	icscert

Weaknesses

CWE-400

Affected Products

Product	Versions
Multilink ML800/1200/1600/2400GE	4.2.1 and earlierAffected
ML810/3000/3100 series switchGE	5.2.0 and earlierAffected

References

https://www.cisa.gov/news-events/ics-advisories/icsa-15-013-04a
http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-013-04a.json
https://ics-cert.us-cert.gov/advisories/ICSA-15-013-04

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.