CVE-2014-5418

high

Description

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-013-04

http://www.gedigitalenergy.com/products/support/multilink/MLSB1214.pdf

Details

Source: Mitre, NVD

Published: 2015-01-17

Updated: 2015-01-21

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H