Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

GE Bently Nevada 3500/22M devices expose open ports

CVE-2016-5788 · published 9 years ago
Summary

The GE Bently Nevada 3500/22M monitoring units that run USB firmware older than version 5.0, as well as the serial‑connected versions, have network ports that remain open. Because those ports can be reached from outside the control network, an attacker could connect and obtain high‑level control of the equipment. Update the devices to the latest firmware or work with the vendor to disable the unnecessary ports.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ge bently_nevada_3500\/22m_usb_firmware All versions
cpe:2.3:o:ge:bently_nevada_3500\/22m_usb_firmware:-:*:*:*:*:*:*:*
ge bently_nevada_3500\/22m_serial_firmware All versions
cpe:2.3:o:ge:bently_nevada_3500\/22m_serial_firmware:-:*:*:*:*:*:*:*
Original advisory text
General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access v...
General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
2% chance of attack within 30 days
Type
CWE-2547PK - Security Features
CWE-285Improper Authorization
Timeline
Published25 Nov 2016
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2016-5788 · NVD
Track software like this
Free during beta