CVE-2023-36857

CVE-2023-36857 affects Baker Hughes Bently Nevada 3500 System TDI Firmware version 5.05. The vulnerability is an authentication bypass by capture-replay: the device can accept out-of-sequence messages from older communications, allowing an attacker to replay captured traffic to gain access. Impac...

CVE-2023-36857 Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access...

CVE-2023-34437 Baker Hughes Bently Nevada 3500 System Incorrect Permission Assignment for Critical Resource

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a vulnerability in their password retrieval functionality which could allow an attacker to access passwords stored on the device...

CVE-2023-34437 Baker Hughes Bently Nevada 3500 System Incorrect Permission Assignment for Critical Resource

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a vulnerability in their password retrieval functionality which could allow an attacker to access passwords stored on the device...

CVE-2023-34437

CVE-2023-34437 affects Baker Hughes Bently Nevada 3500 System TDI Firmware 5.05. The vulnerability is in the password retrieval functionality and could allow an attacker to access passwords stored on the device. The NVD and CISA-ICS advisories identify the affected appliance as the Bently Nevada ...

CVE-2023-34441

The CVE-2023-34441 vulnerability affects Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05. It involves cleartext transmission of authentication secrets used with the device, allowing an attacker to steal the authentication secret from communication traffic and reuse it for arbit...

CVE-2023-34441 Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests...

CVE-2023-34441 Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests...

PT-2023-24876 · Baker Hughes · Bently Nevada 3500 System Tdi Firmware

Name of the Vulnerable Software and Affected Versions: Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 Description: The issue concerns a vulnerability in the password retrieval functionality, which could allow an attacker to access passwords stored on the device. Recommendation...

Baker Hughes Bently Nevada 3500 Security Breach

The Baker Hughes Bently Nevada 3500 is a machinery and equipment monitoring, protection system from Baker Hughes USA. A security vulnerability exists in the Bently Nevada 3500 Rack TDI Firmware version 5.05, which stems from the system's ability to accept out-of-order messages from old...

Baker Hughes Bently Nevada 3500 Information Disclosure Vulnerability

The Baker Hughes Bently Nevada 3500 is a machinery and equipment monitoring, protection system from Baker Hughes USA. An information disclosure vulnerability exists in the Bently Nevada 3500 Rack TDI Firmware version 5.05, which stems from a security issue with the password retrieval feature, and...

Baker Hughes Bently Nevada 3500

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION : Exploitable remotely/low attack complexity Vendor : Baker Hughes - Bently Nevada Equipment : Bently Nevada 3500 System Vulnerabilities : Exposure of Sensitive Information to an Unauthorized Actor, Cleartext Transmission of Sensitive...

New 'MichaelKors' Ransomware-as-a-Service Targeting Linux and VMware ESXi Systems

A new ransomware-as-service RaaS operation called MichaelKors has become the latest file-encrypting malware to target Linux and VMware ESXi systems as of April 2023. The development points to cybercriminal actors increasingly setting their eyes on the ESXi, cybersecurity firm CrowdStrike said in ...

northernnv-events.com Cross Site Scripting vulnerability OBB-3215043

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

New Wave of Ransomware Attacks Exploiting VMware Bug to Target ESXi Servers

VMware ESXi hypervisors are the target of a new wave of attacks designed to deploy ransomware on compromised systems. "These attack campaigns appear to exploit CVE-2021-21974, for which a patch has been available since February 23, 2021," the Computer Emergency Response Team CERT of France said i...

New Wave of Ransomware Attacks Exploiting VMware Bug to Target ESXi Servers

VMware ESXi hypervisors are the target of a new wave of attacks designed to deploy ransomware on compromised systems. "These attack campaigns appear to exploit CVE-2021-21974, for which a patch has been available since February 23, 2021," the Computer Emergency Response Team CERT of France said i...

Unveiling the Advanced Rust-based Nevada Ransomware

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new type of ransomware named "Nevada Ransomware" has been identified. The creators of this ransomware have established an affiliate program that was initially introduced in the RAMP underground...

CVE-2022-29952

Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols 60005/TCP, 60007/TCP for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration BNMC software. These protocol...

CVE-2022-29953

The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality...

CVE-2022-29952

Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols 60005/TCP, 60007/TCP for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration BNMC software. These protocol...