Bently Nevada 3701/44 Firmware vulnerabilities

2 known vulnerabilities in Bently Nevada 3701/44 Firmware from Bakerhughes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Bently Nevada 3701/40 Firmware: Use of Hard-coded Credentials

  CVE-2022-29953Jul 26, 2022BakerhughesEPSS 1.07%

  The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its funct

• 9.1 Critical severity

  Bently Nevada 3701/40 Firmware: Missing Authentication for Critical Functionality

  CVE-2022-29952Jul 26, 2022BakerhughesEPSS 1.13%

  Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Conf