Description
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05
contains a cleartext transmission vulnerability which could allow an attacker to
steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Baker Hughes - Bently Nevada | Bently Nevada 3500 System | 5.05 | — |
Advisories 2
- WID-SEC-2023-2722 Baker Hughes Bently Nevada 3500: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 19, 2023
- ICSA-23-269-05 Baker Hughes Bently Nevada 3500 CISA ICS & IT advisories · Sep 26, 2023