ICSA-18-333-02_Tridium Niagara Enterprise Security, Niagara AX, and Niagara 4
Daniel Santos and Elisa Costante of SecurityMatters reported the vulnerability to Tridium.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-18985US | medium5.4 | — | ||
Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationNiagara 4.4u2
Tridium recommends that affected users upgrade to the latest versions of the software (login required).: Niagara 4.4u2: Version 4.4.93.40.2
https://software.niagara-central.com/ord?portal:/download/6268 - MitigationNiagara 4.6
Tridium recommends that affected users upgrade to the latest versions of the software (login required).: Niagara 4.4u2: Version 4.4.93.40.2
https://software.niagara-central.com/ord?portal:/download/6268 - MitigationNiagara AX 3.8u4
Tridium recommends that affected users upgrade to the latest versions of the software (login required).: Niagara 4.4u2: Version 4.4.93.40.2
https://software.niagara-central.com/ord?portal:/download/6268 - MitigationNiagara Enterprise Security 2.3u1
Tridium recommends that affected users upgrade to the latest versions of the software (login required).: Niagara 4.4u2: Version 4.4.93.40.2
https://software.niagara-central.com/ord?portal:/download/6268 - FixedNiagara 4.4u2
Tridium recommends that affected users upgrade to the latest versions of the software (login required).: Niagara 4.6: Version 4.6.96.28.4
https://software.niagara-central.com/ord?portal:/download/6281 - FixedNiagara 4.6
Tridium recommends that affected users upgrade to the latest versions of the software (login required).: Niagara 4.6: Version 4.6.96.28.4
https://software.niagara-central.com/ord?portal:/download/6281 - FixedNiagara AX 3.8u4
Tridium recommends that affected users upgrade to the latest versions of the software (login required).: Niagara 4.6: Version 4.6.96.28.4
https://software.niagara-central.com/ord?portal:/download/6281 - FixedNiagara Enterprise Security 2.3u1
Tridium recommends that affected users upgrade to the latest versions of the software (login required).: Niagara 4.6: Version 4.6.96.28.4
https://software.niagara-central.com/ord?portal:/download/6281
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan