First published: Fri Nov 25 2016(Updated: )
General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Ge Bently Nevada 3500/22m USB Firmware | ||
GE Bently Nevada 3500/22m USB | ||
GE Bently Nevada 3500/22m Serial Firmware | ||
Bently Nevada 3500/22M |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-5788 is rated as a medium severity vulnerability due to the potential for unauthorized remote access.
To address CVE-2016-5788, update the firmware of the GE Bently Nevada 3500/22M USB and Serial devices to version 5.0 or later.
CVE-2016-5788 allows remote attackers to gain privileged access due to open ports on vulnerable devices.
The affected devices include GE Bently Nevada 3500/22M USB and 3500/22M Serial with firmware versions prior to 5.0.
Yes, CVE-2016-5788 can be exploited remotely by attackers due to the presence of open ports.