CVE:CVE-2014-5419
CNNVD:CNNVD-201501-348
GE Multilink ML800、ML1200和ML1600等都是美国通用电气（GE）公司的以太网交换机产品。
多款GE交换机中存在安全漏洞，该漏洞源于程序在不同的用户安装中使用相同的RSA私钥。远程攻击者可通过在固件图像中读取私钥，并嗅探网络利用该漏洞获取网络流量中的明文内容。以下产品及版本受到影响：使用4.2.1及之前版本固件的GE Multilink ML800，ML1200，ML1600和ML2400交换机，使用5.2.0及之前版本固件的Multilink ML810，ML3000和ML3100交换机。
solution:Upgrade ge multilink_ml3100_firmware to a higher version than 5.2.0,and avoid the version (,5.2.0]; Upgrade ge multilink_ml3100 to a higher version than *; Upgrade ge multilink_ml3000_firmware to a higher version than 5.2.0,and avoid the version (,5.2.0]; Upgrade ge multilink_ml3000 to a higher version than *; Upgrade ge multilink_ml810_firmware to a higher version than 5.2.0,and avoid the version (,5.2.0]; Upgrade ge multilink_ml810 to a higher version than -; Upgrade ge multilink_ml1600_firmware to a higher version than 4.2.1,and avoid the version (,4.2.1]; Upgrade ge multilink_ml1600 to a higher version than -; Upgrade ge multilink_ml800_firmware to a higher version than 4.2.1,and avoid the version (,4.2.1]; Upgrade ge multilink_ml800 to a higher version than -; Upgrade ge multilink_ml2400_firmware to a higher version than 4.2.1,and avoid the version (,4.2.1]; Upgrade ge multilink_ml2400 to a higher version than -; Upgrade ge multilink_ml1200_firmware to a higher version than 4.2.1,and avoid the version (,4.2.1]; Upgrade ge multilink_ml1200 to a higher version than -