Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Baker Hughes - Bently Nevada Component: Bentley Nevada 3500 System Firmware Clear all filters
TI-2023-18647 CVE-2023-36857 · GHSA-p42g-23f7-4prj

Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay

Priority LOW 29

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0038 Published 2023-10-18 No fix listed CWE-294
TI-2023-17267 CVE-2023-34441 · GHSA-q8cx-3xf8-m9w4

Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information

Priority LOW 35

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00293 Published 2023-10-18 No fix listed CWE-319