Read the docs

Tridium

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Tridium records in CISA KEV

No Tridium vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Niagara 14 records MEDIUM Niagara Enterprise Security 12 records MEDIUM Niagara Ax 6 records MEDIUM Niagara Ax Framework 3 records MEDIUM Niagara4 1 record LOW

Records

3 records in Niagara Ax Framework · all components

TI-2017-12310 CVE-2017-16748 · GHSA-jwjj-j6r3-3643

Improper authentication in ICS-CERT Niagara AX Framework and Niagara 4 Framework

Priority MEDIUM 50

An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker ad…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05219 Published 2018-08-20 No fix listed CWE-287
TI-2017-12307 CVE-2017-16744 · GHSA-3365-prfc-qrcq

Path traversal in ICS-CERT Niagara AX Framework and Niagara 4 Framework

Priority MEDIUM 41

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator…

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.06142 Published 2018-08-20 No fix listed CWE-22
TI-2018-13449 CVE-2018-18985 · GHSA-76hj-25wr-pvgg

Cross-site scripting in Tridium Niagara Enterprise Security 2.3u1, all versions prior to…

Priority LOW 26

Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00973 Published 2019-01-29 No fix listed CWE-79
Open these records in search →