CVE-2014-4752
Description
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm system_networking_rackswitch__g8332_firmware | v ≤ 7.7.16.0, v ≤ 7.1.6.0 | — |
| ibm system_networking_rackswitch__g8332 | No range specified | — |
| ibm bladecenter_1g_firmware | v ≤ 5.3.4.0 | — |
| ibm bladecenter_1g | No range specified | — |
| ibm system_networking_rackswitch__g8052_firmware | v ≤ 7.9.1.0 | — |
| ibm system_networking_rackswitch__g8124_firmware | v ≤ 7.9.1.0 | — |
| ibm system_networking_rackswitch__g8124e_firmware | v ≤ 7.9.1.0 | — |
| ibm system_networking_rackswitch__g8124er_firmware | v ≤ 7.9.1.0 | — |
| ibm system_networking_rackswitch__g8264_firmware | v ≤ 7.9.1.0 | — |
| ibm system_networking_rackswitch__g8264t_firmware | v ≤ 7.9.1.0 | — |
| ibm system_networking_rackswitch__g8316_firmware | v ≤ 7.9.1.0 | — |
| ibm system_networking_rackswitch__g8052 | No range specified | — |
| ibm system_networking_rackswitch__g8124 | No range specified | — |
| ibm system_networking_rackswitch__g8124e | No range specified | — |
| ibm system_networking_rackswitch__g8124er | No range specified | — |
| ibm system_networking_rackswitch__g8264 | No range specified | — |
| ibm system_networking_rackswitch__g8264t | No range specified | — |
| ibm system_networking_rackswitch__g8316 | No range specified | — |
| ibm bladecenter_1\/10g_firmware | v ≤ 7.4.7.0 | — |
| ibm bladecenter_1\/10g | No range specified | — |
| ibm flex_system_interconnect_fabric_firmware | v ≤ 7.8.5.0 | — |
| ibm flex_system_interconnect_fabric | No range specified | — |
| ibm bladecenter_1g_l2-7_slb_firmware | v ≤ 21.0.20.0 | — |
| ibm bladecenter_1g_l2-7_slb | No range specified | — |
| ibm bladecenter_10g_vfsm_firmware | v ≤ 7.8.6.0 | — |
| ibm bladecenter_10g_vfsm | No range specified | — |
| ibm system_networking_rackswitch__cn4093_firmware | v ≤ 7.8.5.0 | — |
| ibm system_networking_rackswitch__en2092_firmware | v ≤ 7.8.5.0 | — |
| ibm system_networking_rackswitch__en4093_firmware | v ≤ 7.8.5.0 | — |
| ibm system_networking_rackswitch__en4093r_firmware | v ≤ 7.8.5.0 | — |
| ibm system_networking_rackswitch__g8264cs_firmware | v ≤ 7.8.5.0 | — |
| ibm system_networking_rackswitch__si4093_firmware | v ≤ 7.8.5.0 | — |
| ibm system_networking_rackswitch__cn4093 | No range specified | — |
| ibm system_networking_rackswitch__en2092 | No range specified | — |
| ibm system_networking_rackswitch__en4093 | No range specified | — |
| ibm system_networking_rackswitch__en4093r | No range specified | — |
| ibm system_networking_rackswitch__g8264cs | No range specified | — |
| ibm system_networking_rackswitch__si4093 | No range specified | — |
| ibm server_connectivity_module_firmware | v ≤ 1.1.3.0 | — |
| ibm server_connectivity_module | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.