General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HGe Bently Nevada 3500\/22m Serial
HWGeall versionsGe Bently Nevada 3500\/22m Serial Firmware
OSGeall versionsGe Bently Nevada 3500\/22m Usb
HWGeall versionsGe Bently Nevada 3500\/22m Usb Firmware
OSGeall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2023-5908CRITICAL9.1PL ✓same vendor
Buffer overflow w KEPServerEX umożliwiający crash lub wyciek danych
CVE-2022-2848CRITICAL9.1PL ✓same vendor
Zdalne wykonanie kodu w Kepware KEPServerEX – heap buffer overflow
CVE-2022-2825CRITICAL9.8PL ✓same vendor
RCE bez uwierzytelnienia w Kepware KEPServerEX — stack-based buffer overflow
CVE-2023-0754CRITICAL9.8PL ✓same vendor
Integer overflow umożliwiający RCE w produktach GE Digital i PTC Kepware
CVE-2023-0755CRITICAL9.8PL ✓same vendor
Nieprawidłowa walidacja indeksu tablicy w produktach GE/PTC — RCE