Auth bypass in Bakerhughes Bently Nevada 3701\/40
CVE-2022-29952
Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration (BNMC) software. These protocols provide configuration management and historical data related functionality. Neither protocol has any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.
EPSS exploit prediction
EPSS: 0.011 (63.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 64th percentile — 63.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.010 · newest: 0.011 · change: +0.001
Affected products
- Bakerhughes Bently Nevada 3701\/40
- Bakerhughes Bently Nevada 3701\/40 Firmware
- Bakerhughes Bently Nevada 3701\/44
- Bakerhughes Bently Nevada 3701\/44 Firmware
- Bakerhughes Bently Nevada 3701\/46
- Bakerhughes Bently Nevada 3701\/46 Firmware
- Bakerhughes Bently Nevada 60m100
- Bakerhughes Bently Nevada 60m100 Firmware
Weakness classification (CWE)
References
- www.forescout.com/blog/ (Third Party Advisory)
- www.cisa.gov/uscert/ics/advisories/icsa-22-188-02 (US Government Resource, Third Party Advisory, Mitigation)
Frequently asked questions
- What is CVE-2022-29952?
- CVE-2022-29952 is a critical-severity vulnerability in Bakerhughes Bently Nevada 3701\/40, classified under Missing Authentication for Critical Function. CVSS score: 9.1/10. Published 2022-07-26.
- How severe is CVE-2022-29952?
- Critical severity. CVSS v3 base score is 9.1 out of 10.