Read the docs
TI-2025-03489 Aliases CVE-2025-3945GHSA-g8jq-rx5f-94q7

Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)

Priority MEDIUM 44CWE-88Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-88.

Summary

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00618 49th percentileScored 2026-11-07
Fix Fixed Niagara Framework (Tridium): 4.14.2, 4.15.1, 4.10.11Niagara Enterprise Security (Tridium): 4.14.2, 4.15.1, 4.10.11

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TridiumNiagara Frameworkbefore 4.14.2; before 4.15.1; before 4.10.114.14.2, 4.15.1, 4.10.11Patch availableCNA
TridiumNiagara Enterprise Securitybefore 4.14.2; before 4.15.1; before 4.10.114.14.2, 4.15.1, 4.10.11Patch availableCNA
  • Niagara Framework VendorTridium Affected before 4.14.2; before 4.15.1; before 4.10.11 Fixed in 4.14.2, 4.15.1, 4.10.11 Patch available CNA
  • Niagara Enterprise Security VendorTridium Affected before 4.14.2; before 4.15.1; before 4.10.11 Fixed in 4.14.2, 4.15.1, 4.10.11 Patch available CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:tridium:niagara:4.10u10:*:*:*:*:*:*:*4.10u10VulnerableTridium
cpe:2.3:a:tridium:niagara:4.14u1:*:*:*:*:*:*:*4.14u1VulnerableTridium
cpe:2.3:a:tridium:niagara:4.15:*:*:*:*:*:*:*4.15VulnerableTridium
cpe:2.3:a:tridium:niagara_enterprise_security:4.10u10:*:*:*:*:*:*:*4.10u10VulnerableTridium
cpe:2.3:a:tridium:niagara_enterprise_security:4.14u1:*:*:*:*:*:*:*4.14u1VulnerableTridium
cpe:2.3:a:tridium:niagara_enterprise_security:4.15:*:*:*:*:*:*:*4.15VulnerableTridium
cpe:2.3:o:blackberry:qnx:-:*:*:*:*:*:*:*not specified by NVDRunning onBlackBerry
  • cpe:2.3:a:tridium:niagara:4.10u10:*:*:*:*:*:*:* Versions 4.10u10 Vulnerable ·Tridium
  • cpe:2.3:a:tridium:niagara:4.14u1:*:*:*:*:*:*:* Versions 4.14u1 Vulnerable ·Tridium
  • cpe:2.3:a:tridium:niagara:4.15:*:*:*:*:*:*:* Versions 4.15 Vulnerable ·Tridium
  • cpe:2.3:a:tridium:niagara_enterprise_security:4.10u10:*:*:*:*:*:*:* Versions 4.10u10 Vulnerable ·Tridium
  • cpe:2.3:a:tridium:niagara_enterprise_security:4.14u1:*:*:*:*:*:*:* Versions 4.14u1 Vulnerable ·Tridium
  • cpe:2.3:a:tridium:niagara_enterprise_security:4.15:*:*:*:*:*:*:* Versions 4.15 Vulnerable ·Tridium
  • cpe:2.3:o:blackberry:qnx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·BlackBerry

Remediation

  • Fix · CNA Niagara Framework (Tridium) Fixed in 4.14.2, 4.15.1, 4.10.11
  • Fix · CNA Niagara Enterprise Security (Tridium) Fixed in 4.14.2, 4.15.1, 4.10.11

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Tridium Niagara Enterprise Security, Niagara Framework — docs.niagara-community.com/category/tech_bull

    9 records Highest priority Priority MEDIUM 8 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-03484 Improper Use of Validation FrameworkPriority MEDIUM 48
    • TI-2025-03487 Use of GET Request Method With sensitive Query StringsPriority MEDIUM 46
    • TI-2025-03488 Incorrect permission assignment in Tridium Niagara FrameworkPriority MEDIUM 43
    Show all 9 records → Advisory →
  • Advisory ·

    Tridium Niagara Enterprise Security, Niagara Framework — honeywell.com/us/en/product-security

    4 records Highest priority Priority MEDIUM 3 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-03484 Improper Use of Validation FrameworkPriority MEDIUM 48
    • TI-2025-03487 Use of GET Request Method With sensitive Query StringsPriority MEDIUM 46
    • TI-2025-03483 Observable response discrepancy in Tridium Niagara FrameworkPriority LOW 30
    Show all 4 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-3945
  2. 2026-10-03 Alias added: GHSA-g8jq-rx5f-94q7
  3. 2026-10-14 EPSS moved to the 50th–90th percentile
  4. 2026-10-18 EPSS moved to the below the 50th percentile

References

Advisory 2

  • TI-2017-12310 Improper authentication in ICS-CERT Niagara AX Framework and Niagara 4 Framework CVSS 3.0CRITICAL 9.8
  • TI-2025-03484 Improper Use of Validation Framework CVSS 3.1CRITICAL 9.8
  • TI-2025-03487 Use of GET Request Method With sensitive Query Strings CVSS 3.1HIGH 7.5
  • TI-2025-03488 Incorrect permission assignment in Tridium Niagara Framework CVSS 3.1CRITICAL 9.8
  • TI-2025-03485 Improper Handling of Windows: DATA Alternate Data Stream CVSS 3.1CRITICAL 9.8
  • TI-2025-03482 Broken or risky cryptographic algorithm in Tridium Niagara Framework CVSS 3.1CRITICAL 9.8
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences