{"api_version":"1","generated_at":"2026-07-23T06:16:07+00:00","cve":"CVE-2016-2310","urls":{"html":"https://cve.report/CVE-2016-2310","api":"https://cve.report/api/cve/CVE-2016-2310.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-2310","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-2310"},"summary":{"title":"CVE-2016-2310","description":"General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.","state":"PUBLISHED","assigner":"icscert","published_at":"2016-06-09 10:59:00","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-798","n/a"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01","name":"https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"title":"GE MultiLink Series Hard-coded Credential Vulnerability | ICS-CERT","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2310","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2310","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"2310","vulnerable":"1","versionEndIncluding":"5.5.0","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"ge","cpe5":"multilink_firmware","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"2310","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ge","cpe5":"multilink_ml1200","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"2310","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ge","cpe5":"multilink_ml1600","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"2310","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ge","cpe5":"multilink_ml2400","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"2310","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ge","cpe5":"multilink_ml3000","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"2310","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ge","cpe5":"multilink_ml3100","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"2310","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ge","cpe5":"multilink_ml800","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"2310","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"ge","cpe5":"multilink_ml810","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[{"cve":"CVE-2016-2310","qid":"591321","title":"General Electric MultiLink Managed Switches Hard-coded Credentials Vulnerability (GET-20042)"}]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T23:24:48.970Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2016-06-02T00:00:00.000Z","descriptions":[{"lang":"en","value":"General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-06-09T01:57:01.000Z","orgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","shortName":"icscert"},"references":[{"tags":["x_refsource_MISC"],"url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"ics-cert@hq.dhs.gov","ID":"CVE-2016-2310","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01","refsource":"MISC","url":"https://ics-cert.us-cert.gov/advisories/ICSA-16-154-01"}]}}}},"cveMetadata":{"assignerOrgId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","assignerShortName":"icscert","cveId":"CVE-2016-2310","datePublished":"2016-06-09T10:00:00.000Z","dateReserved":"2016-02-09T00:00:00.000Z","dateUpdated":"2024-08-05T23:24:48.970Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2016-06-09 10:59:00","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-798","n/a"],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ge:multilink_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.0","matchCriteriaId":"57707326-C7A4-412B-BF90-98E12CF97312"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ge:multilink_ml1200:-:*:*:*:*:*:*:*","matchCriteriaId":"1179F179-510A-4A97-8365-B81C0E0FC605"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:multilink_ml1600:-:*:*:*:*:*:*:*","matchCriteriaId":"620703E4-1D78-44CB-B353-517A8AB2A815"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:multilink_ml2400:-:*:*:*:*:*:*:*","matchCriteriaId":"426A283A-540C-43F2-8397-52668BADDEB8"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:multilink_ml800:-:*:*:*:*:*:*:*","matchCriteriaId":"9A00E85C-1B21-43F7-8323-F759216BFB90"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:multilink_ml810:-:*:*:*:*:*:*:*","matchCriteriaId":"81DC26E5-D3D7-41C6-B654-B06FA0461451"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:ge:multilink_ml3000:-:*:*:*:*:*:*:*","matchCriteriaId":"7EE40202-1D8F-406E-8281-B67DCF5E8501"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:multilink_ml3100:-:*:*:*:*:*:*:*","matchCriteriaId":"D72F9922-A473-4076-91E3-CF3899C179D7"},{"vulnerable":false,"criteria":"cpe:2.3:h:ge:multilink_ml810:-:*:*:*:*:*:*:*","matchCriteriaId":"81DC26E5-D3D7-41C6-B654-B06FA0461451"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ge:multilink_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.5.0k","matchCriteriaId":"EF7A9653-BF61-4480-B349-577C6155B991"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"2310","Ordinal":"1","Title":"CVE-2016-2310","CVE":"CVE-2016-2310","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"2310","Ordinal":"1","NoteData":"General Electric (GE) Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware before 5.5.0 and ML810, ML3000, and ML3100 switches with firmware before 5.5.0k have hardcoded credentials, which allows remote attackers to modify configuration settings via the web interface.","Type":"Description","Title":"CVE-2016-2310"},{"CveYear":"2016","CveId":"2310","Ordinal":"2","NoteData":"2016-06-09","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"2310","Ordinal":"3","NoteData":"2016-06-08","Type":"Other","Title":"Modified"}]}}}