PT-2022-3155 · Bently Nevada · Bnmc+1

Daniel Dos Santos + 1 · Published 2022-06-22 · Updated 2024-02-09 · CVE-2022-29952

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bently Nevada condition monitoring equipment through 2022-04-29

Description The issue is related to the mishandling of authentication in Bently Nevada condition monitoring equipment. It utilizes the TDI command and data protocols for communications between the monitoring controller and System 1 and/or Bently Nevada Monitor Configuration (BNMC) software. These protocols provide configuration management and historical data related functionality. Neither protocol has any authentication features, allowing any attacker capable of communicating with the ports in question to invoke desired functionality. The protocols use ports 60005/TCP and 60007/TCP.

Recommendations For Bently Nevada condition monitoring equipment through 2022-04-29, consider restricting access to ports 60005/TCP and 60007/TCP to minimize the risk of exploitation. As a temporary workaround, consider disabling the TDI command and data protocols until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Improper Authentication

Weakness Enumeration

CWE-306

CWE-287

Related Identifiers

BDU:2022-03835

CVE-2022-29952

Affected Products

Bnmc

Bently Nevada Condition Monitoring Equipment

References · 8

• https://bdu.fstec.ru/vul/2022-03835 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29952 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29952 · Security Note
• https://forescout.com/resources/ot-icefall-report · Note
• https://forescout.com/blog · Note
• https://cisa.gov/uscert/ics/advisories/icsa-22-188-02 · Note
• https://csirt.gob.cl/media/2022/06/9VSA22-00666-01-1.pdf · Note
• https://t.me/cibsecurity/47032 · Telegram Post