Tridium Niagara Ax vulnerabilities
4 vulnerabilities
Known vulnerabilities in Tridium Niagara Ax, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2012-4701tridium · niagara_axtridium niagara_axDirectory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature.EPSS6.42%MediumCVE-2012-3024tridium · niagara_axtridium niagara_axTridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.EPSS2.20%MediumCVE-2012-3025tridium · niagara_axtridium niagara_axThe default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.EPSS1.93%MediumCVE-2019-13528tridium · niagara_ax +1 moretridium niagara_axA specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), and Niagara 4.7u1 (JACE-8000, Edge 10).EPSS0.35%