CVE-2014-4752 - CVE House
Back to Database
Status published Critical CVE-2014-4752

IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and...

Vulnerability Description

IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-4752

Credits & Attribution

No credits recorded in the NVD database.

References

More from ibm

View All →
CVE-2021-39070
IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the...
Critical 9.8
CVE-2021-39066
IBM Financial Transaction Manager 3.2.4 does not invalidate session any...
Medium 6.3
CVE-2021-39044
IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request...
Medium 4.3
CVE-2020-7239
The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based...
Medium 6.1
CVE-2020-28198
The 'id' parameter of IBM Tivoli Storage Manager Version 5...
High 7

Affected Vendor

Affected Software

system networking rackswitch g8332 firmware, system networking rackswitch g8332, bladecenter 1g firmware, bladecenter 1g, system networking rackswitch g8052 firmware, system networking rackswitch g8124 firmware, system networking rackswitch g8124e firmware, system networking rackswitch g8124er firmware, system networking rackswitch g8264 firmware, system networking rackswitch g8264t firmware, system networking rackswitch g8316 firmware, system networking rackswitch g8052, system networking rackswitch g8124, system networking rackswitch g8124e, system networking rackswitch g8124er, system networking rackswitch g8264, system networking rackswitch g8264t, system networking rackswitch g8316, bladecenter 1\/10g firmware, bladecenter 1\/10g, flex system interconnect fabric firmware, flex system interconnect fabric, bladecenter 1g l2-7 slb firmware, bladecenter 1g l2-7 slb, bladecenter 10g vfsm firmware, bladecenter 10g vfsm, system networking rackswitch cn4093 firmware, system networking rackswitch en2092 firmware, system networking rackswitch en4093 firmware, system networking rackswitch en4093r firmware, system networking rackswitch g8264cs firmware, system networking rackswitch si4093 firmware, system networking rackswitch cn4093, system networking rackswitch en2092, system networking rackswitch en4093, system networking rackswitch en4093r, system networking rackswitch g8264cs, system networking rackswitch si4093, server connectivity module firmware, server connectivity module
Vulnerable Versions:
0

Timeline

Official Publish: September 23rd, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.