Description
The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality.
Advisories 1
- ICSA-22-188-02 Bently Nevada ADAPT 3701/4X Series and 60M100 CISA ICS & IT advisories · Jul 7, 2022