PT-2023-25725

CVE-2023-36857

·

Published

2023-10-18

·

Updated

2023-10-25

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05
Description The issue is a replay vulnerability that could allow an attacker to replay older captured packets of traffic to the device to gain access.
Recommendations For Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05, as a temporary workaround, consider implementing measures to prevent the replay of captured packets, such as enhancing network monitoring and packet inspection capabilities, until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾