High ICSA-21-231-02 1 CVE

Baker Hughes Bently Nevada 3500

Published Aug 19, 2021 · Updated Feb 24, 2022 · Revision 2

Vendor: Bently Nevada, Baker Hughes Product: 3500 Rack Configuration Part No. 129133-01 Product: 3500/22M Firmware Part No. 288055-01 Product: System 1 6.x Part No. 3060/00 Product: System 1 Part No. 3071/xx & 3072/xx

Summary

Successful exploitation of this vulnerability could allow an attacker access to system credentials.

Vulnerabilities 1

High 8.2

CVE-2021-32997

Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort

The affected Baker Hughes Bentley Nevada products (3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500…

Bentley Nevada, a Baker Hughes subsidiary 3500 System 1, Part No. 3071/xx & 3072/xx 3500/22M Firmware, Part No. 288055-01 3500 System 1 6.x, Part No. 3060/00

May 25, 2022

Revision history

2022-02-24 #2
ICSA-21-231-02 Baker Hughes Bently Nevada 3500 (Update A)
2021-08-19 #1
ICSA-21-231-02P Baker Hughes Bently Nevada 3500

References

ICS Advisory ICSA-21-231-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-231-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B