CVE-2022-29953
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-29953
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Bently Nevada 3700 series of condition monitoring equipment through 2022-04-29 has a maintenance interface on port 4001/TCP with undocumented, hardcoded credentials. An attacker capable of connecting to this interface can thus trivially take over its functionality.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Bently Nevada 3701/40 和 60M100 (3701/60) 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Baker Hughes Bently Nevada 3701/40和Bently Nevada 60M100 (3701/60)都是美国Baker Hughes公司的一种状态检测系统。 Bently Nevada 3701/40 和 60M100 (3701/60) 版本中存在信任管理问题漏洞，该漏洞源于受影响的产品在固件中的维护接口凭据上具有硬编码，允许调试和进程执行功能，攻击者利用该漏洞可以远程代码执行或导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2022-29953
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-29953
请登录查看更多情报信息。
- https://www.forescout.com/blog/x_refsource_MISC
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-188-02x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-29953
Same Patch Batch · n/a · 2022-07-26 · 67 CVEs total
| CVE-2021-33459 | yasm 代码问题漏洞 | |
| CVE-2021-33440 | Cesanta MJS 代码问题漏洞 | |
| CVE-2021-33441 | Cesanta MJS 代码问题漏洞 | |
| CVE-2021-33442 | Cesanta MJS 代码问题漏洞 | |
| CVE-2021-33453 | lrzip 资源管理错误漏洞 | |
| CVE-2021-33454 | yasm 代码问题漏洞 | |
| CVE-2021-33455 | yasm 代码问题漏洞 | |
| CVE-2021-33456 | yasm 代码问题漏洞 | |
| CVE-2021-33457 | yasm 代码问题漏洞 | |
| CVE-2021-33458 | yasm 代码问题漏洞 | |
| CVE-2021-33452 | lrzip 安全漏洞 | |
| CVE-2021-33460 | yasm 代码问题漏洞 | |
| CVE-2021-33468 | yasm 资源管理错误漏洞 | |
| CVE-2021-33467 | yasm 资源管理错误漏洞 | |
| CVE-2021-33466 | yasm 代码问题漏洞 | |
| CVE-2021-33465 | yasm 代码问题漏洞 | |
| CVE-2021-33464 | yasm 缓冲区错误漏洞 | |
| CVE-2021-33463 | yasm 代码问题漏洞 | |
| CVE-2021-33462 | yasm 资源管理错误漏洞 | |
| CVE-2021-33461 | yasm 资源管理错误漏洞 |
Showing top 20 of 67 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2022-29953
No comments yet