CVE-2016-2310: Critical severity ge multilink firmware vulnerability
General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2310?
CVE-2016-2310 has a high severity level due to the presence of hardcoded credentials that allow unauthorized remote access to configuration settings.
How do I fix CVE-2016-2310?
To fix CVE-2016-2310, update the GE Multilink switches to firmware version 5.5.0 or later.
Which GE Multilink switches are affected by CVE-2016-2310?
The affected switches include GE Multilink ML800, ML1200, ML1600, ML2400 with firmware before 5.5.0 and ML810, ML3000, and ML3100 with firmware before 5.5.0k.
What are the potential risks associated with CVE-2016-2310?
The potential risks include unauthorized modification of configuration settings and possible disruption of network operations.
Is there a workaround for CVE-2016-2310 if I cannot update the firmware?
There is no effective workaround for CVE-2016-2310, and the recommended action is to update to a secure version as soon as possible.