NA
Product
Niagara AX
6
CVEs
0
On KEV
4.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Niagara AX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13528 | 4.4 | Sep 24 | A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e,… Affected: 3.8u4 |
| CVE-2012-4701 | – | Feb 15 | Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging… Affected: 3.5; 3.6; 3.7 |
| CVE-2012-3025 | – | Aug 16 | The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to… Affected: through 3.6 |
| CVE-2012-3024 | – | Aug 16 | Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force… Affected: through 3.6 |
| CVE-2012-4028 | – | Jul 16 | Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored… Affected: All versions, or not specified |
| CVE-2012-4027 | – | Jul 16 | Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect… Affected: All versions, or not specified |
Showing 6