← Back

CVE-2016-2310

nvd nist
Published: Jun 9, 2016Modified: May 6, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.

Affected (2)

Ge
1 product
Multilink Firmware
Configuration A
1 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Multilink Firmware
Up to 5.5.0
Running on/withPlatform Versions
Ge
Multilink Ml1200
All versions
Ge
Multilink Ml1600
All versions
Ge
Multilink Ml2400
All versions
Ge
Multilink Ml800
All versions
Configuration B
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Multilink Firmware
Up to 5.5.0k
Running on/withPlatform Versions
Ge
Multilink Ml3000
All versions
Ge
Multilink Ml3100
All versions
Ge
Multilink Ml810
All versions

Related CWEs

CWE-798
Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.