CVE-2014-4752 Hardcoded credentials in n/a
Remote attackers can gain unauthorized access to IBM network switches using hardcoded credentials, compromising network infrastructure security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2014-4752?
CVE-2014-4752 is a critical vulnerability in n/a, published on 23 Sep 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
Which versions are affected by CVE-2014-4752?
It affects 40 products.
Products include Ibm Bladecenter 10g Vfsm, Ibm Bladecenter 10g Vfsm Firmware, Ibm Bladecenter 1\/10g, Ibm Bladecenter 1\/10g Firmware, Ibm Bladecenter 1g, Ibm Bladecenter 1g Firmware and 34 more.
How do I fix CVE-2014-4752?
No fix has been published for CVE-2014-4752 yet. Limit exposure of the affected software until one is available.
Is CVE-2014-4752 being exploited?
There is no known exploitation of CVE-2014-4752 in the wild and no public exploit code.
Sources
Also known as GHSA-vj44-hfx9-q99v.