CVE-2023-34437

Summary

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05

contains a vulnerability in their password retrieval functionality which could allow an attacker to access passwords stored on the device.

Affected Software

Weaknesses

• CWE-732: CWE-732 Incorrect Permission Assignment for Critical Resource

Workarounds

Baker Hughes – Bently Nevada recommends that users follow their hardening guidelines to reduce the risk of exploitation. Customers who have registered for access to Baker Hughes DAM may directly access the hardening guideline at https://dam.bakerhughes.com/media/?mediaId=32F7FC2F-9F22-4C69-BB847565B7834D08 .For customers that do not have access to Baker Hughes DAM may send an email to bentlysupport@bakerhughes.com to request document 106M9733.

ADP Enrichment

CVE Program Container

Additional References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-05

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-05

• ←Previous
• Next→