Credential Storage Flaw in Tridium's Niagara AX Framework
CVE-2012-4028

Currently unrated

Key Information:

Vendor

Tridium

Status
Niagara Ax
Vendor
CVE Published:
16 July 2012

What is CVE-2012-4028?

The Tridium Niagara AX Framework is susceptible to a vulnerability where it inadequately stores credential data. This security loophole allows attackers with context-specific knowledge to circumvent access restrictions by exploiting the stored authentication information. As a result, unauthorized access could be gained to sensitive functionalities or data, posing significant risks to cybersecurity integrity.

References

http://www.washingtonpost.com/investigations/tridiums-nia...
x_refsource_MISC
https://www.tridium.com/galleries/briefings/NiagaraAX_Fra...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.