Lucene search
HistoryOct 19, 2023 - 12:15 a.m.
CVE-2023-36857
baker hughes
bently nevada
firmware
3500 system
replay vulnerability
access
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
20.2%
Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05
contains a replay vulnerability which could allow an attacker to
replay older captured packets of traffic to the device to gain access.
Affected configurations
Node
bakerhughesbentley_nevada_3500_systemMatch-
bakerhughesbentley_nevada_3500_system_firmwareMatch5.0.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bakerhughes | bentley_nevada_3500_system | - | cpe:2.3:h:bakerhughes:bentley_nevada_3500_system:-:*:*:*:*:*:*:* |
| bakerhughes | bentley_nevada_3500_system_firmware | 5.0.5 | cpe:2.3:o:bakerhughes:bentley_nevada_3500_system_firmware:5.0.5:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-36857
2023-10-19 00:15:16
cvelist
cvelist
prion
prion
Code injection
2023-10-19 00:15:00
ics
ics
Baker Hughes Bently Nevada 3500
2023-09-26 12:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
20.2%
Related for NVD:CVE-2023-36857