{"id":"CVE-2014-4752","aliases":["EUVD-2014-4671","GHSA-vj44-hfx9-q99v"],"status":"published","title":"IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before...","description":"IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02027,"percentile":0.81157,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2014-09-23T22:00:00Z","modified":"2026-06-17T00:10:33Z","products":[{"vendor":"ibm","product":"bladecenter_10g_vfsm"},{"vendor":"ibm","product":"bladecenter_10g_vfsm_firmware"},{"vendor":"ibm","product":"bladecenter_1\\/10g"},{"vendor":"ibm","product":"bladecenter_1\\/10g_firmware"},{"vendor":"ibm","product":"bladecenter_1g"},{"vendor":"ibm","product":"bladecenter_1g_firmware"},{"vendor":"ibm","product":"bladecenter_1g_l2-7_slb"},{"vendor":"ibm","product":"bladecenter_1g_l2-7_slb_firmware"},{"vendor":"ibm","product":"flex_system_interconnect_fabric"},{"vendor":"ibm","product":"flex_system_interconnect_fabric_firmware"},{"vendor":"ibm","product":"server_connectivity_module"},{"vendor":"ibm","product":"server_connectivity_module_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__cn4093"},{"vendor":"ibm","product":"system_networking_rackswitch__cn4093_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__en2092"},{"vendor":"ibm","product":"system_networking_rackswitch__en2092_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__en4093"},{"vendor":"ibm","product":"system_networking_rackswitch__en4093_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__en4093r"},{"vendor":"ibm","product":"system_networking_rackswitch__en4093r_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8052"},{"vendor":"ibm","product":"system_networking_rackswitch__g8052_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8124"},{"vendor":"ibm","product":"system_networking_rackswitch__g8124_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8124e"},{"vendor":"ibm","product":"system_networking_rackswitch__g8124e_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8124er"},{"vendor":"ibm","product":"system_networking_rackswitch__g8124er_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8264"},{"vendor":"ibm","product":"system_networking_rackswitch__g8264_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8264cs"},{"vendor":"ibm","product":"system_networking_rackswitch__g8264cs_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8264t"},{"vendor":"ibm","product":"system_networking_rackswitch__g8264t_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8316"},{"vendor":"ibm","product":"system_networking_rackswitch__g8316_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__g8332"},{"vendor":"ibm","product":"system_networking_rackswitch__g8332_firmware"},{"vendor":"ibm","product":"system_networking_rackswitch__si4093"},{"vendor":"ibm","product":"system_networking_rackswitch__si4093_firmware"}],"references":[{"url":"http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096232","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://secunia.com/advisories/54512","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4752"},{"url":"https://github.com/advisories/GHSA-vj44-hfx9-q99v"}],"sources":{"cve":[{"id":"CVE-2014-4752","description":"IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.","status":"published","published":"2014-09-23T22:00:00Z","modified":"2024-08-06T11:27:36.683Z","updated_at":"2026-11-02T14:33:45.604635Z"}],"euvd":[{"id":"EUVD-2014-4671","description":"IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.","status":"published","published":"2014-09-23T22:00:00Z","modified":"2024-08-06T11:27:36Z","updated_at":"2026-11-03T01:57:05.209854Z"}],"ghsa":[{"id":"GHSA-vj44-hfx9-q99v","title":"IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before...","description":"IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.","status":"published","published":"2022-05-17T04:01:26Z","modified":"2023-01-28T05:00:55Z","updated_at":"2026-11-02T14:43:26.967621Z"}],"nvd":[{"id":"CVE-2014-4752","description":"IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.","status":"published","published":"2014-09-23T22:55:03.653Z","modified":"2026-06-17T00:10:33.04Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:02:55.884979Z"}]}}