CVE-2021-32997

🗓️ 25 May 2022 13:33:43Reported by icscertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 107 Views

Weak encryption algorithm used in Baker Hughes Bentley Nevada products for storage and transmission of sensitive data

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-32997	25 May 202218:38	–	circl
CNNVD	Baker Hughes Bently Nevada 3500 安全漏洞	24 Feb 202200:00	–	cnnvd
Cvelist	CVE-2021-32997 Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort	25 May 202213:33	–	cvelist
EUVD	EUVD-2021-19718	7 Oct 202500:30	–	euvd
ICS	Baker Hughes Bently Nevada 3500	19 Aug 202100:00	–	ics
NVD	CVE-2021-32997	25 May 202214:15	–	nvd
OSV	CVE-2021-32997	25 May 202214:15	–	osv
Prion	Design/Logic Flaw	25 May 202214:15	–	prion
RedhatCVE	CVE-2021-32997	22 May 202521:19	–	redhatcve
Vulnrichment	CVE-2021-32997 Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort	25 May 202213:33	–	vulnrichment

NVD

Vulners

Node

bakerhughes bentley_nevada_3500_system_1_6.x_(3060/00)_firmwareRange≤6.98

AND

bakerhughes bentley_nevada_3500_system_1_6.x_(3060/00)Match-

Node

bakerhughes bentley_nevada_3500_system_1_(3072/xx)_firmwareRange<21.1

bakerhughes bentley_nevada_3500_system_1_(3072/xx)_firmwareMatch21.1-

AND

bakerhughes bentley_nevada_3500_system_1_(3072/xx)Match-

Node

bakerhughes bentley_nevada_3500_system_1_(3071/xx)_firmwareRange<21.1

bakerhughes bentley_nevada_3500_system_1_(3071/xx)_firmwareMatch21.1-

AND

bakerhughes bentley_nevada_3500_system_1_(3071/xx)Match-

Node

bakerhughes bentley_nevada_3500/22m_(288055-01)_firmwareRange≤5.05

AND

bakerhughes bentley_nevada_3500/22m_(288055-01)Match-

Node

bakerhughes bentley_nevada_3500_rack_configuration_(129133-01)_firmwareRange≤6.4

AND

bakerhughes bentley_nevada_3500_rack_configuration_(129133-01)Match-

[
  {
    "product": "3500 System 1 6.x, Part No. 3060/00",
    "vendor": "Bentley Nevada, a Baker Hughes subsidiary",
    "versions": [
      {
        "lessThanOrEqual": "6.98",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "3500 System 1, Part No. 3071/xx & 3072/xx",
    "vendor": "Bentley Nevada, a Baker Hughes subsidiary",
    "versions": [
      {
        "lessThanOrEqual": "21.1 HF1",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "3500 Rack Configuration, Part No. 129133-01",
    "vendor": "Bentley Nevada, a Baker Hughes subsidiary",
    "versions": [
      {
        "lessThanOrEqual": "6.4",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "3500/22M Firmware, Part No. 288055-01",
    "vendor": "Bentley Nevada, a Baker Hughes subsidiary",
    "versions": [
      {
        "lessThanOrEqual": "5.05",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cisa	www.cisa.gov/uscert/ics/advisories/icsa-21-231-02

21 Nov 2024 06:08Current

7.7High risk

Vulners AI Score7.7

CVSS 25

CVSS 3.17.5 - 8.2

EPSS0.00051

SSVC

CWE-916