Oct. 19, 2023, 12:15 a.m. |

National Vulnerability Database web.nvd.nist.gov

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05

contains a cleartext transmission vulnerability which could allow an attacker to

steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests.

attacker authentication baker hughes bently nevada 3500 communication cve device firmware hughes nevada requests reuse secret steal system tdi traffic transmission version vulnerability

Offensive Security Engineering Technical Lead, Device Security

@ Google | Amsterdam, Netherlands

Senior Security Engineering Program Manager

@ Microsoft | Redmond, Washington, United States

Information System Security Analyst

@ Resource Management Concepts, Inc. | Dahlgren, Virginia, United States

Critical Facility Security Officer - Evening Shift

@ Allied Universal | Charlotte, NC, United States

Information System Security Officer, Junior

@ Resource Management Concepts, Inc. | Patuxent River, Maryland, United States

Security Engineer

@ JPMorgan Chase & Co. | Plano, TX, United States