CVE-2023-36857: Bakerhughes Bentley Nevada 3500 System Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Baker Hughes โ€“ Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access.

Affected products

  • Bakerhughes Bentley Nevada 3500 System Firmware: version 5.0.5 only

Published 2023-10-19. Last modified 2026-06-17.