CVE-2016-5788: General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial...

Security readout for executives and security teams

This CVE concerns GE Bently Nevada 3500/22M industrial monitoring hardware. The public record says certain USB firmware before 5.0 and Serial variants expose open ports that can help remote attackers gain privileged access. The source bundle does not provide CVSS scoring, detailed attack paths, or confirmed active exploitation. Exposure is most likely in industrial environments using GE Bently Nevada 3500/22M USB or Serial modules, especially where the device network is reachable beyond tightly controlled engineering segments. Asset inventory and firmware confirmation are needed because the bundle lacks normalized affected CPEs. Treat this as an industrial control exposure requiring asset confirmation and network containment review. Urgency rises if affected modules are reachable from broader corporate networks or remote access pathways, but the public bundle does not support claiming active exploitation. Mitigation focus: Identify any GE Bently Nevada 3500/22M USB or Serial modules in service.; Confirm USB firmware version and flag versions before 5.0 for vendor-guided remediation.; Review the ICS-CERT advisory and GE guidance before applying firmware or configuration changes..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.