CVE-2014-4752
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD
Description
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
Affected (41)
Products: Ibm: System Networking Rackswitch G8332 Firmware, Bladecenter 1g Firmware, Bladecenter 1g, System Networking Rackswitch G8052 Firmware, System Networking Rackswitch G8124 Firmware, System Networking Rackswitch G8124e Firmware, System Networking Rackswitch G8124er Firmware, System Networking Rackswitch G8264 Firmware, System Networking Rackswitch G8264t Firmware, System Networking Rackswitch G8316 Firmware, System Networking Rackswitch G8052, System Networking Rackswitch G8124, System Networking Rackswitch G8124e, System Networking Rackswitch G8124er, System Networking Rackswitch G8264, System Networking Rackswitch G8264t, System Networking Rackswitch G8316, Bladecenter 1/10g Firmware, Bladecenter 1/10g, Flex System Interconnect Fabric Firmware, Flex System Interconnect Fabric, Bladecenter 1g L2 7 Slb Firmware, Bladecenter 1g L2 7 Slb, System Networking Rackswitch G8332, Bladecenter 10g Vfsm Firmware, Bladecenter 10g Vfsm, System Networking Rackswitch Cn4093 Firmware, System Networking Rackswitch En2092 Firmware, System Networking Rackswitch En4093 Firmware, System Networking Rackswitch En4093r Firmware, System Networking Rackswitch G8264cs Firmware, System Networking Rackswitch Si4093 Firmware, System Networking Rackswitch Cn4093, System Networking Rackswitch En2092, System Networking Rackswitch En4093, System Networking Rackswitch En4093r, System Networking Rackswitch G8264cs, System Networking Rackswitch Si4093, Server Connectivity Module Firmware, Server Connectivity Module
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.7.16.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 5.3.4.0 | |
| All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.9.1.0 | |
| Up to 7.9.1.0 | |
| Up to 7.9.1.0 | |
| Up to 7.9.1.0 | |
| Up to 7.9.1.0 | |
| Up to 7.9.1.0 | |
| Up to 7.9.1.0 | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.4.7.0 | |
| All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.8.5.0 | |
| All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 21.0.20.0 | |
| All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.1.6.0 | |
| All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.8.6.0 | |
| All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 7.8.5.0 | |
| Up to 7.8.5.0 | |
| Up to 7.8.5.0 | |
| Up to 7.8.5.0 | |
| Up to 7.8.5.0 | |
| Up to 7.8.5.0 | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions | |
| All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.1.3.0 | |
| All versions |
References (4)
Source: psirt@us.ibm.com
Source: psirt@us.ibm.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.