Tridium Niagara
Successful exploitation of these vulnerabilities could allow a local user to escalate their privileges.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-13528US | medium4.4 | — | ||
A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JAC… | ||||
| CVE-2019-8998US | high7.8 | — | ||
An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Pla… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- MitigationNiagara
Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.
- MitigationNiagara
Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.
- MitigationNiagara AX
Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.
- MitigationNiagara AX
Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.
- FixedNiagara
Niagara AX 3.8u4: NRE Config Dist: 3.8.401.1
- FixedNiagara
Niagara AX 3.8u4: NRE Config Dist: 3.8.401.1
- FixedNiagara AX
Niagara AX 3.8u4: NRE Config Dist: 3.8.401.1
- FixedNiagara AX
Niagara AX 3.8u4: NRE Config Dist: 3.8.401.1
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan