Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-36857 EUVD-2023-40777GHSA-p42g-23f7-4prj

Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay

Published Oct 18, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Vendor: Baker Hughes - Bently Nevada Product: Bently Nevada 3500 System

Description

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05

contains a replay vulnerability which could allow an attacker to

replay older captured packets of traffic to the device to gain access.

Affected products

VendorProductAffectedFixed
Baker Hughes - Bently Nevada Bently Nevada 3500 System 5.05 —

Advisories 2

References