CVE-2022-29952

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-29952
Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration (BNMC) software. These protocols provide configuration management and historical data related functionality. Neither protocol has any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-188-02 Mitigation Third Party Advisory US Government Resource
https://www.forescout.com/blog/ Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:bakerhughes:bently_nevada_3701\/40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bakerhughes:bently_nevada_3701\/40:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:bakerhughes:bently_nevada_3701\/44_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bakerhughes:bently_nevada_3701\/44:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:bakerhughes:bently_nevada_3701\/46_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bakerhughes:bently_nevada_3701\/46:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:bakerhughes:bently_nevada_60m100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:bakerhughes:bently_nevada_60m100:-:*:*:*:*:*:*:*
History

02 Aug 2022, 20:53

Type Values Removed Values Added
CPE cpe:2.3:h:bakerhughes:bently_nevada_3701\/46:-:*:*:*:*:*:*:*
cpe:2.3:o:bakerhughes:bently_nevada_3701\/40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bakerhughes:bently_nevada_60m100:-:*:*:*:*:*:*:*
cpe:2.3:h:bakerhughes:bently_nevada_3701\/40:-:*:*:*:*:*:*:*
cpe:2.3:o:bakerhughes:bently_nevada_3701\/46_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:bakerhughes:bently_nevada_3701\/44_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bakerhughes:bently_nevada_3701\/44:-:*:*:*:*:*:*:*
cpe:2.3:o:bakerhughes:bently_nevada_60m100_firmware:-:*:*:*:*:*:*:*
References (MISC) https://www.cisa.gov/uscert/ics/advisories/icsa-22-188-02 - (MISC) https://www.cisa.gov/uscert/ics/advisories/icsa-22-188-02 - Mitigation, Third Party Advisory, US Government Resource
References (MISC) https://www.forescout.com/blog/ - (MISC) https://www.forescout.com/blog/ - Third Party Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1
CWE CWE-306
First Time Bakerhughes bently Nevada 60m100
Bakerhughes bently Nevada 3701\/46 Firmware
Bakerhughes bently Nevada 3701\/44 Firmware
Bakerhughes bently Nevada 3701\/40 Firmware
Bakerhughes bently Nevada 3701\/40
Bakerhughes
Bakerhughes bently Nevada 60m100 Firmware
Bakerhughes bently Nevada 3701\/46
Bakerhughes bently Nevada 3701\/44

26 Jul 2022, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-07-26 22:15

Updated : 2024-02-09 03:16

NVD link : CVE-2022-29952

Mitre link : CVE-2022-29952

CVE.ORG link : CVE-2022-29952

JSON object : View

Products Affected

bakerhughes

  • bently_nevada_3701\/40_firmware
  • bently_nevada_60m100
  • bently_nevada_3701\/46
  • bently_nevada_3701\/44_firmware
  • bently_nevada_3701\/40
  • bently_nevada_60m100_firmware
  • bently_nevada_3701\/46_firmware
  • bently_nevada_3701\/44
CWE
CWE-306

Missing Authentication for Critical Function