CVE-2023-34441

8.2 highEPSS 0.3%

High (8.2) in bakerhughes bentley nevada 3500 system firmware. EPSS 0.3% chance of exploitation in the next 30 days.

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests.

Severity

CVSS 3.1

8.2 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2023-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bakerhughes:bentley_nevada_3500_system_firmware

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-05
https://www.cisa.gov/news-events/ics-advisories/icsa-23-269-05

Check your stack JSON