CVE-2014-5419

Name of the Vulnerable Software and Affected Versions GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier

Description The issue allows remote attackers to obtain the cleartext content of network traffic by reading the same RSA private key used across different customers' installations from a firmware image and then sniffing the network.

Recommendations For GE Multilink ML800, ML1200, ML1600, and ML2400 switches versions 4.2.1 and earlier, update the firmware to a version later than 4.2.1. For GE Multilink ML810, ML3000, and ML3100 switches versions 5.2.0 and earlier, update the firmware to a version later than 5.2.0.