What’s Vulnerable › Vulnerabilities

CVE-2014-4752

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-09-23 · updated 2026-06-17

Description

IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected products

• IBM Bladecenter 1/10G: all versions
• IBM Bladecenter 1/10G Firmware: through 7.4.7.0
• IBM Bladecenter 10G Vfsm: all versions
• IBM Bladecenter 10G Vfsm Firmware: through 7.8.6.0
• IBM Bladecenter 1G: all versions
• IBM Bladecenter 1G Firmware: through 5.3.4.0
• IBM Bladecenter 1G L2-7 Slb: all versions
• IBM Bladecenter 1G L2-7 Slb Firmware: through 21.0.20.0
• IBM Flex System Interconnect Fabric: all versions
• IBM Flex System Interconnect Fabric Firmware: through 7.8.5.0
• IBM Server Connectivity Module: all versions
• IBM Server Connectivity Module Firmware: through 1.1.3.0
• IBM System Networking Rackswitch Cn4093: all versions
• IBM System Networking Rackswitch Cn4093 Firmware: through 7.8.5.0
• IBM System Networking Rackswitch En2092: all versions
• IBM System Networking Rackswitch En2092 Firmware: through 7.8.5.0
• IBM System Networking Rackswitch En4093: all versions
• IBM System Networking Rackswitch En4093 Firmware: through 7.8.5.0
• IBM System Networking Rackswitch En4093R: all versions
• IBM System Networking Rackswitch En4093R Firmware: through 7.8.5.0
• IBM System Networking Rackswitch G8052: all versions
• IBM System Networking Rackswitch G8052 Firmware: through 7.9.1.0
• IBM System Networking Rackswitch G8124: all versions
• IBM System Networking Rackswitch G8124 Firmware: through 7.9.1.0
• IBM System Networking Rackswitch G8124E: all versions
• IBM System Networking Rackswitch G8124E Firmware: through 7.9.1.0
• IBM System Networking Rackswitch G8124Er: all versions
• IBM System Networking Rackswitch G8124Er Firmware: through 7.9.1.0
• IBM System Networking Rackswitch G8264: all versions
• IBM System Networking Rackswitch G8264 Firmware: through 7.9.1.0

References

• http://secunia.com/advisories/54512
• http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096232
• http://secunia.com/advisories/54512
• http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096232

Get alerted when CVE-2014-4752 or the next vulnerability affects your stack