CVE-2016-2310

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-06-09 · updated 2026-06-17
Weakness: CWE-798

Description

General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.

Affected products

GE Multilink Firmware: through 5.5.0; through 5.5.0k

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01
https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01

Get alerted when CVE-2016-2310 or the next vulnerability affects your stack