CVE-2016-2310

Critical

Published: 09/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, allowing remote attackers to modify configuration settings via the web interface.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized changes to device configurations, jeopardizing the integrity and availability of the network.

Recommendation

It is recommended to update the firmware to version 5.5.0 or later to eliminate hardcoded credentials and secure the devices.

Original NVD description (English source)

General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.