Bakerhughes vulnerabilities
We track 4 vulnerabilities in Bakerhughes products across 5 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2023.
Latest Bakerhughes vulnerabilities
- 8.2 High severity
Bently Nevada 3500 System: Cleartext Transmission of Sensitive Information
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests.
- 7.5 High severity
Bently Nevada 3500 System: Exposure of Sensitive Information to an Unauthorized Actor
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a vulnerability in their password retrieval functionality which could allow an attacker to access passwords stored on the device.
- 9.8 Critical severity
Bently Nevada 3701/40 Firmware: Use of Hard-coded Credentials
The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its funct
- 9.1 Critical severity
Bently Nevada 3701/40 Firmware: Missing Authentication for Critical Functionality
Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Conf