PT-2013-1700 · Tridium · Tridium Niagara Ax

Published 2013-02-15 · Updated 2023-03-22 · CVE-2012-4701

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tridium Niagara AX versions 3.5 through 3.7

Description The issue allows remote attackers to read sensitive files and potentially execute arbitrary code by leveraging valid credentials or the guest feature.

Recommendations For versions 3.5 through 3.7, update to a version that contains a fix for this issue to prevent directory traversal attacks.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2012-4701

Affected Products

Tridium Niagara Ax

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-4701 · Security Note
• http://ics-cert.us-cert.gov/pdf/ICSA-13-045-01.pdf · Note
• https://niagara-central.com/ord?portal:/dev/wiki/Niagara_AX_Security_Patch_11-Feb-2013 · Note