Auth bypass in Bakerhughes Bently Nevada 3701\/40
CVE-2022-29952
Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration (BNMC) software. These protocols provide configuration management and historical data related functionality. Neither protocol has any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality.
Vulnerability class: Broken Authentication
EPSS: 0.010 (59.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.
Affected products
- Bakerhughes Bently_nevada_3701\/40
- Bakerhughes Bently_nevada_3701\/40_firmware
- Bakerhughes Bently_nevada_3701\/44
- Bakerhughes Bently_nevada_3701\/44_firmware
- Bakerhughes Bently_nevada_3701\/46
- Bakerhughes Bently_nevada_3701\/46_firmware
- Bakerhughes Bently_nevada_60m100
- Bakerhughes Bently_nevada_60m100_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)
Frequently asked questions
- What is CVE-2022-29952?
- CVE-2022-29952 is a critical-severity vulnerability in Bakerhughes Bently Nevada 3701\/40, classified under Missing Authentication for Critical Function. CVSS score: 9.1/10. Published 2022-07-26.
- How severe is CVE-2022-29952?
- Critical severity. CVSS v3 base score is 9.1 out of 10.