ICS CERT Niagara AX Framework And Niagara 4 Framework vulnerabilities

2 vulnerabilities

Known vulnerabilities in ICS CERT Niagara AX Framework And Niagara 4 Framework, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2017-16744ics-certniagara ax framework and niagara 4 framework+2
EPSS score
6.22%
A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials.9.8CVE-2017-16748ics-certniagara ax framework and niagara 4 framework+2
EPSS score
5.29%
An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system.