Directory Traversal Issue in Tridium Niagara AX Software
CVE-2012-4701

Currently unrated

Key Information:

Vendor

Tridium

Status
Niagara Ax
Vendor
CVE Published:
15 February 2013

What is CVE-2012-4701?

A directory traversal vulnerability exists in Tridium Niagara AX versions 3.5, 3.6, and 3.7, which permits remote attackers to gain unauthorized access to sensitive files. By exploiting valid user credentials or leveraging the guest feature, attackers can read critical files and potentially execute arbitrary code, posing serious risks to system integrity and confidentiality. It is essential for users of affected products to take necessary precautions and apply security patches to mitigate these vulnerabilities.

References

http://ics-cert.us-cert.gov/pdf/ICSA-13-045-01.pdf
x_refsource_MISC
https://www.niagara-central.com/ord?portal:/dev/wiki/Niag...
x_refsource_CONFIRM

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.