CVE-2014-4752
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before...
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
- Record
CVE-2014-4752- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
- Record
CVE-2014-4752- Updated
- 2026-11-02
EUVDEUVD-2014-4671 No score
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
- Record
EUVD-2014-4671- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vj44-hfx9-q99v No score
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before...
IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
- Record
GHSA-vj44-hfx9-q99v- Updated
- 2026-11-02
Affected products
- ibm flex system interconnect fabric
- ibm server connectivity module
- ibm bladecenter 10g vfsm
- ibm bladecenter 10g vfsm firmware
- ibm bladecenter 1\/10g
- ibm bladecenter 1\/10g firmware
- ibm bladecenter 1g
- ibm bladecenter 1g firmware
- ibm bladecenter 1g l2-7 slb
- ibm bladecenter 1g l2-7 slb firmware
- ibm flex system interconnect fabric firmware
- ibm server connectivity module firmware
Show 28 moreShow less
- ibm system networking rackswitch cn4093
- ibm system networking rackswitch cn4093 firmware
- ibm system networking rackswitch en2092
- ibm system networking rackswitch en2092 firmware
- ibm system networking rackswitch en4093
- ibm system networking rackswitch en4093 firmware
- ibm system networking rackswitch en4093r
- ibm system networking rackswitch en4093r firmware
- ibm system networking rackswitch g8052
- ibm system networking rackswitch g8052 firmware
- ibm system networking rackswitch g8124
- ibm system networking rackswitch g8124 firmware
- ibm system networking rackswitch g8124e
- ibm system networking rackswitch g8124e firmware
- ibm system networking rackswitch g8124er
- ibm system networking rackswitch g8124er firmware
- ibm system networking rackswitch g8264
- ibm system networking rackswitch g8264 firmware
- ibm system networking rackswitch g8264cs
- ibm system networking rackswitch g8264cs firmware
- ibm system networking rackswitch g8264t
- ibm system networking rackswitch g8264t firmware
- ibm system networking rackswitch g8316
- ibm system networking rackswitch g8316 firmware
- ibm system networking rackswitch g8332
- ibm system networking rackswitch g8332 firmware
- ibm system networking rackswitch si4093
- ibm system networking rackswitch si4093 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4752 is a high vulnerability (CVSS 10.0) in Ibm Flex System Interconnect Fabric, published September 23, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.03%, the 81st percentile. No source names a fixed version.