CVE-2022-29953

Katalog CVE

CVSS 9.8 · Critical EPSS 1,1%

Kerentanan Use of Hard-coded Credentials pada bakerhughes bently nevada 3701/40 firmware, bakerhughes bently nevada 3701/44 firmware +2 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality.

Rincian

Terbit di NVD

26 Juli 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-188-02 mitigasi · advisory pihak ketiga · pemerintah AS
• https://www.forescout.com/blog/ advisory pihak ketiga