CVE-2023-34441CWE-319

Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information

Medium · published October 18, 2023

CVSS v3.1
6.8
EPSS
0%
Percentile
20.7
In the wild
Unconfirmed
What it is

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05

contains a cleartext transmission vulnerability which could allow an attacker to

steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00293 · 20.7th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-10-18T23:22Z
EPSS history
Timeline
  • 18 OCT 23:22Z
    Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information
    cvelistv5