NetSight
critical10.0

CVE-2014-4752

IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS…

Impact

IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected products

VendorProductAffected versions
IbmSystem Networking Rackswitch G8332 Firmware
through 7.7.16.0
through 7.1.6.0
IbmSystem Networking Rackswitch G8332
All versions
IbmBladecenter 1g Firmware
through 5.3.4.0
IbmBladecenter 1g
All versions
IbmSystem Networking Rackswitch G8052 Firmware
through 7.9.1.0
IbmSystem Networking Rackswitch G8124 Firmware
through 7.9.1.0
IbmSystem Networking Rackswitch G8124e Firmware
through 7.9.1.0
IbmSystem Networking Rackswitch G8124er Firmware
through 7.9.1.0
IbmSystem Networking Rackswitch G8264 Firmware
through 7.9.1.0
IbmSystem Networking Rackswitch G8264t Firmware
through 7.9.1.0
IbmSystem Networking Rackswitch G8316 Firmware
through 7.9.1.0
IbmSystem Networking Rackswitch G8052
All versions

References