CVEvulnerability
CVE-2016-5788
10.0 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 10.0 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-254, CWE-285
Description
General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors.
Affected configurations
• ge bently nevada 3500\/22m usb firmware
• ge bently nevada 3500\/22m serial firmware
Related
Weakness · not in database (1)
Weakness · CWE (1)
- CWE-285 Improper Authorization weakness
References
- http://www.securityfocus.com/bid/93452 www.securityfocus.com
- https://ics-cert.us-cert.gov/advisories/ICSA-16-252-01 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/93452 www.securityfocus.com
- https://ics-cert.us-cert.gov/advisories/ICSA-16-252-01 Third Party Advisory, US Government Resource