CVE-2016-5788 — CRITICAL (10.0)

Vulnerability Description

General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors.

CVSS Score

10.0

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ge	Bently Nevada 3500\/22M Usb Firmware	-
Ge	Bently Nevada 3500\/22M Usb	-
Ge	Bently Nevada 3500\/22M Serial Firmware	-
Ge	Bently Nevada 3500\/22M Serial	-

Related Weaknesses (CWE)

CWE-285 CWE-254

References

http://www.securityfocus.com/bid/93452
https://ics-cert.us-cert.gov/advisories/ICSA-16-252-01Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/93452
https://ics-cert.us-cert.gov/advisories/ICSA-16-252-01Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2016-5788?

CVE-2016-5788 is a vulnerability with a CVSS score of 10.0 (CRITICAL). General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via ...

How severe is CVE-2016-5788?

CVE-2016-5788 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2016-5788?

Check the references section above for vendor advisories and patch information. Affected products include: Ge Bently Nevada 3500\/22M Usb Firmware, Ge Bently Nevada 3500\/22M Usb, Ge Bently Nevada 3500\/22M Serial Firmware, Ge Bently Nevada 3500\/22M Serial.