Tridium Niagara
view advisory published 2018-07-10
Successful exploitation of these vulnerabilities could allow an attacker to read, write, and delete sensitive files to gain administrator privileges on the Niagara system.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-16748US | critical9.8 | — | ||
An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a… | ||||
| CVE-2017-16744US | high7.2 | Exploit | ||
A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- MitigationNiagara 4 Framework
Niagara 4 Framework v4.4: Apply Update 1 release (4.4.92.2.1)
- MitigationNiagara 4 Framework
Niagara 4 Framework v4.4: Apply Update 1 release (4.4.92.2.1)
- MitigationNiagara AX Framework
Niagara 4 Framework v4.4: Apply Update 1 release (4.4.92.2.1)
- MitigationNiagara AX Framework
Niagara 4 Framework v4.4: Apply Update 1 release (4.4.92.2.1)
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan