Vulnerabilities > CVE-2014-5418 - Resource Management Errors vulnerability in GE products

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

CWE-399

NVD

Published: 2015-01-17

Updated: 2015-01-21

Summary

GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.

Vulnerable Configurations

Part	Description	Count
OS	Ge GE Multilink Ml810 Firmware 5.2.0 GE Multilink Ml1600 Firmware 4.2.1 GE Multilink Ml1200 Firmware 4.2.1 GE Multilink Ml3000 Firmware 5.2.0 GE Multilink Ml2400 Firmware 4.2.1 GE Multilink Ml3100 Firmware 5.2.0 GE Multilink Ml800 Firmware 4.2.1	7
Hardware	Ge GE Multilink Ml810 - GE Multilink Ml1600 - GE Multilink Ml1200 - GE Multilink Ml3000 * GE Multilink Ml2400 - GE Multilink Ml3100 * GE Multilink Ml800 -	7

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References