Bakerhughes

    Dashboard / Vendors

    Products: 20
    Vulnerabilities: 6
    Known Exploited: 0
    2
    Critical Level Threats
    2
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2023-36857

    Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay

    Last Modified: Jan 16, 2025
    Published: Oct 18, 2023

    CVE-2023-34437

    Baker Hughes Bently Nevada 3500 System Incorrect Permission Assignment for Critical Resource

    Last Modified: Jan 16, 2025
    Published: Oct 18, 2023

    CVE-2023-34441

    Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information

    Last Modified: Nov 21, 2024
    Published: Oct 18, 2023

    CVE-2022-29953

    The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality.

    Last Modified: Nov 21, 2024
    Published: Jul 26, 2022

    CVE-2022-29952

    Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration (BNMC) software. These protocols provide configuration management and historical data related functionality. Neither protocol has any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality.

    Last Modified: Nov 21, 2024
    Published: Jul 26, 2022
    Items Per Page
    Bakerhughes Vulnerabilities & Security CVEs | CVE-DB