漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Bently Nevada condition monitoring equipment through 2022-04-29 mishandles authentication. It utilizes the TDI command and data protocols (60005/TCP, 60007/TCP) for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration (BNMC) software. These protocols provide configuration management and historical data related functionality. Neither protocol has any authentication features, allowing any attacker capable of communicating with the ports in question to invoke (a subset of) desired functionality.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Baker Hughes Bently Nevada 3701/40 访问控制错误漏洞
Vulnerability Description
Baker Hughes Bently Nevada 3701/40是美国Baker Hughes公司的一种状态检测系统。 Bently Nevada 3701/4X 系列和 60M100 (3701/60) 版本中存在访问控制错误漏洞，该漏洞源于受影响的产品在固件中的维护接口凭据上具有硬编码，允许调试和进程执行功能，攻击者利用该漏洞可以文件操作、远程代码执行或导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A