CVE-2016-2310

· CRITICALModified

← All CVEs

CVSS v3.1

9.8

EPSS

3.22%

Published

Jun 9, 2016

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-798

Affected Products (10)

ge · multilink_firmwarevulnerable

ge · multilink_ml1200

ge · multilink_ml1600

ge · multilink_ml2400

ge · multilink_ml800

ge · multilink_ml810

ge · multilink_ml3000

ge · multilink_ml3100

ge · multilink_ml810

ge · multilink_firmwarevulnerable

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs