Description
The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality.
Affected Platforms
Bakerhughes Bently Nevada 3701\/46 FirmwareBakerhughes Bently Nevada 3701\/40 FirmwareBakerhughes Bently Nevada 3701\/40Bakerhughes Bently Nevada 3701\/46Bakerhughes Bently Nevada 3701\/44Bakerhughes Bently Nevada 60M100 FirmwareBakerhughes Bently Nevada 60M100Bakerhughes Bently Nevada 3701\/44 Firmware