PT-2023-24876 · Baker Hughes · Bently Nevada 3500 System Tdi Firmware

·

CVE-2023-34437

·

Publicado

2023-10-18

·

Atualizado

2024-11-13

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05
Description The issue concerns a vulnerability in the password retrieval functionality, which could allow an attacker to access passwords stored on the device.
Recommendations For Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05, consider disabling the password retrieval functionality until a patch is available. Restrict access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-34437

Produtos afetados

Bently Nevada 3500 System Tdi Firmware