Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2021-32997

Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected Baker Hughes Bentley Nevada products (3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01 versions 5.05 and prior) utilize a weak encryption algorithm for storage and transmission of sensitive data, which may allow an attacker to more easily obtain credentials used for access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bentley Nevada, a Baker Hughes subsidiary 3500 System 1 6.x, Part No. 3060/00

  • All to ≤ 6.98affected

Bentley Nevada, a Baker Hughes subsidiary 3500 System 1, Part No. 3071/xx & 3072/xx

  • All to ≤ 21.1 HF1affected

Bentley Nevada, a Baker Hughes subsidiary 3500 Rack Configuration, Part No. 129133-01

  • All to ≤ 6.4affected

Bentley Nevada, a Baker Hughes subsidiary 3500/22M Firmware, Part No. 288055-01

  • All to ≤ 5.05affected

References