PT-2015-3806
CVE-2014-5419
·
تاريخ النشر
2015-01-17
·
تاريخ التحديث
2025-11-05
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier
GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier
Description
The issue allows remote attackers to obtain the cleartext content of network traffic by reading the same RSA private key used across different customers' installations from a firmware image and then sniffing the network.
Recommendations
For GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier, update the firmware to a version later than 4.2.1.
For GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier, update the firmware to a version later than 5.2.0.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾