Bentley Nevada 3500 System Firmware vulnerabilities

2 known vulnerabilities in Bentley Nevada 3500 System Firmware from Bakerhughes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Bently Nevada 3500 System: Cleartext Transmission of Sensitive Information

  CVE-2023-34441Oct 19, 2023Baker Hughes - Bently Nevada

  Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests.

• 7.5 High severity

  Bently Nevada 3500 System: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-34437Oct 19, 2023Baker Hughes - Bently Nevada

  Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a vulnerability in their password retrieval functionality which could allow an attacker to access passwords stored on the device.