CVE-2012-2974

CVE-2012-2974 describes a critical authentication bypass vulnerability in the web interface of the SMC SMC8024L2 switch. Remote attackers can gain administrative access by directly requesting specific .html files within various subdirectories, circumventing the login process entirely. This vulnerability carries a CVSS score of 10.0, indicating maximum severity due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the inherent ease of exploitation and critical impact warrant attention.