CVE-2021-32997
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Baker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort
The affected Baker Hughes Bentley Nevada products (3500 System 1 6.x, Part No. 3060/00 versions 6.98 and prior, 3500 System 1, Part No. 3071/xx & 3072/xx versions 21.1 HF1 and prior, 3500 Rack Configuration, Part No. 129133-01 versions 6.4 and prior, and 3500/22M Firmware, Part No. 288055-01 versions 5.05 and prior) utilize a weak encryption algorithm for storage and transmission of sensitive data, which may allow an attacker to more easily obtain credentials used for access.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
3500 System 1 6.x, Part No. 3060/00
- Vendor
- Bentley Nevada, a Baker Hughes subsidiary
- Product
- 3500 System 1 6.x, Part No. 3060/00
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| All | affected | custom | Unavailable | 6.98 | None listed |
3500 System 1, Part No. 3071/xx & 3072/xx
- Vendor
- Bentley Nevada, a Baker Hughes subsidiary
- Product
- 3500 System 1, Part No. 3071/xx & 3072/xx
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| All | affected | custom | Unavailable | 21.1 HF1 | None listed |
3500 Rack Configuration, Part No. 129133-01
- Vendor
- Bentley Nevada, a Baker Hughes subsidiary
- Product
- 3500 Rack Configuration, Part No. 129133-01
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| All | affected | custom | Unavailable | 6.4 | None listed |
3500/22M Firmware, Part No. 288055-01
- Vendor
- Bentley Nevada, a Baker Hughes subsidiary
- Product
- 3500/22M Firmware, Part No. 288055-01
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| All | affected | custom | Unavailable | 5.05 | None listed |