« Volver al listado

CVE-2014-4752

Estado: ModificadaAlta (10)—

IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (40)

IBM — Bladecenter 1/10gIBM — Bladecenter 1/10g FirmwareIBM — Bladecenter 10G VfsmIBM — Bladecenter 10G Vfsm FirmwareIBM — Bladecenter 1GIBM — Bladecenter 1G FirmwareIBM — Bladecenter 1G L2-7 SLBIBM — Bladecenter 1G L2-7 SLB FirmwareIBM — Flex System Interconnect FabricIBM — Flex System Interconnect Fabric FirmwareIBM — Server Connectivity ModuleIBM — Server Connectivity Module FirmwareIBM — System Networking Rackswitch Cn4093IBM — System Networking Rackswitch Cn4093 FirmwareIBM — System Networking Rackswitch En2092IBM — System Networking Rackswitch En2092 FirmwareIBM — System Networking Rackswitch En4093IBM — System Networking Rackswitch En4093 FirmwareIBM — System Networking Rackswitch En4093rIBM — System Networking Rackswitch En4093r FirmwareIBM — System Networking Rackswitch G8052IBM — System Networking Rackswitch G8052 FirmwareIBM — System Networking Rackswitch G8124IBM — System Networking Rackswitch G8124 FirmwareIBM — System Networking Rackswitch G8124eIBM — System Networking Rackswitch G8124e FirmwareIBM — System Networking Rackswitch G8124erIBM — System Networking Rackswitch G8124er FirmwareIBM — System Networking Rackswitch G8264IBM — System Networking Rackswitch G8264 FirmwareIBM — System Networking Rackswitch G8264csIBM — System Networking Rackswitch G8264cs FirmwareIBM — System Networking Rackswitch G8264tIBM — System Networking Rackswitch G8264t FirmwareIBM — System Networking Rackswitch G8316IBM — System Networking Rackswitch G8316 FirmwareIBM — System Networking Rackswitch G8332IBM — System Networking Rackswitch G8332 FirmwareIBM — System Networking Rackswitch Si4093IBM — System Networking Rackswitch Si4093 Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-4752",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@us.ibm.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-09-23T22:55:03.653",
  "references": [
    {
      "url": "http://secunia.com/advisories/54512",
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096232",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@us.ibm.com"
    },
    {
      "url": "http://secunia.com/advisories/54512",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096232",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, and G8264-T switches before 7.9.10.0; EN4093, EN4093R, CN4093, SI4093, EN2092, and G8264CS switches before 7.8.6.0; Flex System Interconnect Fabric before 7.8.6.0; 1G L2-7 SLB switch for Bladecenter before 21.0.21.0; 10G VFSM for Bladecenter before 7.8.14.0; 1:10G switch for Bladecenter before 7.4.8.0; 1G switch for Bladecenter before 5.3.5.0; Server Connectivity Module before 1.1.3.4; System Networking RackSwitch G8332 before 7.7.17.0; and System Networking RackSwitch G8000 before 7.1.7.0 have hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Switches IBM System Networking G8052, G8124, G8124-E, G8124-ER, G8264, G8316, y G8264-T anterior a 7.9.10.0; Switches EN4093, EN4093R, CN4093, SI4093, EN2092, y G8264CS anterior a 7.8.6.0; Flex System Interconnect Fabric anterior a 7.8.6.0; Switch 1G L2-7 SLB para Bladecenter anterior a 21.0.21.0; 10G VFSM para Bladecenter anterior a 7.8.14.0; Switch 1:10G para Bladecenter anterior a 7.4.8.0; Switch 1G para Bladecenter anterior a 5.3.5.0; Server Connectivity Module anterior a 1.1.3.4; System Networking RackSwitch G8332 anterior a 7.7.17.0; y System Networking RackSwitch G8000 anterior a 7.1.7.0 tienen credenciales embebidas, lo que facilita a atacantes remotos obtener acceso a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:10:33.040",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8332_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "126B8C13-5889-4683-BD03-47F1859B1098",
              "versionEndIncluding": "7.7.16.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8332:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "978D82F0-A5CF-4D04-99C8-51A45B4750DB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:bladecenter_1g_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDAC29A8-DF40-48B3-998B-56AB1E8F55F2",
              "versionEndIncluding": "5.3.4.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:bladecenter_1g:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02948935-4D8E-49C0-8580-0E7219F47E93"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8052_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9ED35D50-A6DD-4036-9BC4-E8C8412C6D80",
              "versionEndIncluding": "7.9.1.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8124_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "60E00C0A-2082-4200-AF29-76CFB30397CA",
              "versionEndIncluding": "7.9.1.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8124e_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DBB3F8B-1385-40E3-8508-AB0F47C6052A",
              "versionEndIncluding": "7.9.1.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8124er_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B61E4D25-3128-4F67-A4EE-F0DFC3DB98C5",
              "versionEndIncluding": "7.9.1.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8264_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AC534F7-FBAA-468A-8527-25BFCAB76521",
              "versionEndIncluding": "7.9.1.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8264t_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0501BE9F-EC69-4CF1-855A-9C7389C995EE",
              "versionEndIncluding": "7.9.1.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8316_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5CD1617-EC31-45A0-84EC-7C651D7FB578",
              "versionEndIncluding": "7.9.1.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8052:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4DD3FF3-18FF-46F9-842E-23C64E615F19"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8124:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8D8BB0B-9D06-4678-B1CF-3A8F0D350999"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8124e:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "70091AC1-C2BC-49C4-910C-26AE34805FD3"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8124er:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7650DF13-AE2C-4010-A90D-EC38F8ED4D8D"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8264:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB2B0C96-5992-413F-B772-E355ADA4F791"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8264t:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2743B8C-898E-4FB5-92A6-0ED0918CBC6B"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8316:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B283425E-C925-49F6-A366-82DF10A43B9F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:bladecenter_1\\/10g_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FBD25597-B364-4FE9-B6DB-E23E07183CFD",
              "versionEndIncluding": "7.4.7.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:bladecenter_1\\/10g:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1CED3F1B-FED2-4213-AB00-9D5DC8988D72"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:flex_system_interconnect_fabric_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C9FBCBF-17F1-4055-93F4-4DC00FDCDD9E",
              "versionEndIncluding": "7.8.5.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:flex_system_interconnect_fabric:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "760446E8-F069-470B-A605-5F869E242259"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:bladecenter_1g_l2-7_slb_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DC90DCF6-E0DE-4D41-9F38-0F9EC00EF676",
              "versionEndIncluding": "21.0.20.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:bladecenter_1g_l2-7_slb:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99B67DC5-30CB-4D3F-97F7-21EF75EAE612"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8332_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0103BF95-F624-423A-8C9E-5FA14D644875",
              "versionEndIncluding": "7.1.6.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8332:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "978D82F0-A5CF-4D04-99C8-51A45B4750DB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:bladecenter_10g_vfsm_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5821C68-CB3F-4F13-AAF0-C62A743A464F",
              "versionEndIncluding": "7.8.6.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:bladecenter_10g_vfsm:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52419D7A-9BC6-45ED-963C-EB910F8DA0B7"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__cn4093_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "152CBE74-26EA-4A9A-8146-38A19F981ABB",
              "versionEndIncluding": "7.8.5.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__en2092_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A92D662-D815-4A7C-B291-3277A9607972",
              "versionEndIncluding": "7.8.5.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__en4093_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7AD00FB6-5B15-4103-BF9F-D6AFAA3D15E7",
              "versionEndIncluding": "7.8.5.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__en4093r_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07189485-C4EE-42D8-9E4B-2BD087D11EAC",
              "versionEndIncluding": "7.8.5.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__g8264cs_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C34F3089-F2FF-4D9C-B1CB-95673F44CE82",
              "versionEndIncluding": "7.8.5.0"
            },
            {
              "criteria": "cpe:2.3:o:ibm:system_networking_rackswitch__si4093_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B000067-7050-4F20-9398-5A2DB8CE7BC7",
              "versionEndIncluding": "7.8.5.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__cn4093:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF847D4C-FBE0-47E0-9258-7F2211F865A7"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__en2092:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BB1701F-A205-436A-A283-4612058E2917"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__en4093:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EFBFF10E-A95D-4677-B3A1-94FFFC2C23D4"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__en4093r:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF28AC8F-E394-41FB-9231-15DCF23AB4DE"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__g8264cs:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "722DAC15-6519-478B-92E5-4E493E5DD2A0"
            },
            {
              "criteria": "cpe:2.3:h:ibm:system_networking_rackswitch__si4093:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F753679C-08B5-4362-8379-8ADC5FB2CAFA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ibm:server_connectivity_module_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57B3B06C-A542-4B33-923C-355B405ED74B",
              "versionEndIncluding": "1.1.3.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:ibm:server_connectivity_module:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ABE97296-4751-4860-8EB2-CF9E9905096A"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/798.html\" target=\"_blank\">CWE-798: Use of Hard-coded Credentials</a>",
  "sourceIdentifier": "psirt@us.ibm.com"
}