CVE-2023-34441: Bakerhughes Bentley Nevada 3500 System Firmware

High severity, CVSS 8.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests.

Affected products

• Bakerhughes Bentley Nevada 3500 System Firmware: version 5.0.5 only

Published 2023-10-19. Last modified 2026-06-17.