The affected Baker Hughes Bentley Nevada products (3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01 versions 5.05 and prior) utilize a weak encryption algorithm for storage and transmission of sensitive data, which may allow an attacker to more easily obtain credentials used for access.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-21-231-02 | Third Party Advisory US Government Resource |
| https://www.cisa.gov/uscert/ics/advisories/icsa-21-231-02 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
21 Nov 2024, 06:08
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 8.2 |
| References | () https://www.cisa.gov/uscert/ics/advisories/icsa-21-231-02 - Third Party Advisory, US Government Resource |
Information
Published : 2022-05-25 14:15
Updated : 2024-11-21 06:08
NVD link : CVE-2021-32997
Mitre link : CVE-2021-32997
CVE.ORG link : CVE-2021-32997
JSON object : View
Products Affected
bakerhughes
- bentley_nevada_3500_system_1_6.x_\(3060\/00\)
- bentley_nevada_3500_system_1_\(3072\/xx\)_firmware
- bentley_nevada_3500_system_1_\(3071\/xx\)_firmware
- bentley_nevada_3500_system_1_6.x_\(3060\/00\)_firmware
- bentley_nevada_3500\/22m_\(288055-01\)_firmware
- bentley_nevada_3500_rack_configuration_\(129133-01\)_firmware
- bentley_nevada_3500_rack_configuration_\(129133-01\)
- bentley_nevada_3500\/22m_\(288055-01\)
- bentley_nevada_3500_system_1_\(3072\/xx\)
- bentley_nevada_3500_system_1_\(3071\/xx\)
CWE
CWE-916
Use of Password Hash With Insufficient Computational Effort