Authentication Bypass in Tridium Niagara AX Framework
CVE-2012-3024

Currently unrated

Key Information:

Vendor

Tridium

Status
Niagara Ax
Vendor
CVE Published:
16 August 2012

What is CVE-2012-3024?

The Tridium Niagara AX Framework version 3.6 is vulnerable due to the use of predictable values for session IDs and encryption keys. This allows remote attackers to employ brute-force methods to bypass authentication mechanisms, potentially leading to unauthorized access to sensitive system controls and data.

References

http://www.tridium.com/cs/tridium_news/security_patch_36
x_refsource_CONFIRM
http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.