Back to Database
Status published
Medium
CVE-2014-5418
GE Multilink Uncontrolled Resource Consumption
Vulnerability Description
GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier allow remote attackers to cause a denial of service (resource consumption or reboot) via crafted packets.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-5418
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Eireann Leverett of IOActive
References
More from GE
View All →CVE-2022-3092
GE CIMPLICITY Out-of-bounds Write
High
7.8
CVE-2022-3084
GE CIMPLICITY Access of Uninitialized Pointer
High
7.8
CVE-2022-2952
GE CIMPLICITY Access of Uninitialized Pointer
High
7.8
CVE-2022-2948
GE CIMPLICITY Heap-based Buffer Overflow
High
7.8
CVE-2022-2002
GE CIMPLICITY Untrusted Pointer Dereference
High
7.8
Affected Vendor
Affected Software
Multilink ML800/1200/1600/2400, ML810/3000/3100 series switch
Vulnerable Versions:
0
Timeline
Official Publish:
January 17th, 2015
Last Modified:
November 4th, 2025
Added to House:
July 19th, 2026