PT-2012-5155 · Tridium · Tridium Niagara Ax Framework

Published 2012-07-16 · Updated 2023-03-22 · CVE-2012-4028

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tridium Niagara AX Framework (affected versions not specified)

Description The issue concerns the improper storage of credential data, allowing attackers to bypass access restrictions by using the stored information for authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2012-4028

Affected Products

Tridium Niagara Ax Framework

References · 3

• https://tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4028 · Security Note
• http://washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html · Note