CVE:CVE-2022-29952
CNNVD:CNNVD-202207-600
Baker Hughes Bently Nevada 3701/40是美国Baker Hughes公司的一种状态检测系统。
Bently Nevada 3701/4X 系列和 60M100 (3701/60) 版本中存在访问控制错误漏洞，该漏洞源于受影响的产品在固件中的维护接口凭据上具有硬编码，允许调试和进程执行功能，攻击者利用该漏洞可以文件操作、远程代码执行或导致拒绝服务。
solution:Upgrade bakerhughes bently_nevada_3701/40_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade bakerhughes bently_nevada_3701/44_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade bakerhughes bently_nevada_3701/46_firmware to a higher version than 4.1,and avoid the version (,4.1); Upgrade bakerhughes bently_nevada_60m100_firmware to a higher version than -
solution:Upgrade microsoft windows_10 to a higher version than 20h2,21h1,21h2,1809,1909,and avoid the version 20h2,21h1,21h2,1809,1909; Upgrade microsoft windows_server to a higher version than 20h2,and avoid the version 20h2; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than -