Tridium kayıtları
tridium üreticisine ait 20 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-732 Incorrect Permission Assignment for Critical Resource2
- CWE-522 Insufficiently Protected Credentials2
- CWE-287 Improper Authentication2
- CWE-285 Improper Authorization1
- CWE-325 Missing Cryptographic Step1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
20 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2017-16748İstismar yok | An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and pritridium · niagara · CWE-287 | Kritik9,8 | — | %5,1 | 20 Ağu 2018 |
39İzleyin | CVE-2012-4701İstismar yok | Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently tridium · niagara ax · CWE-22 | Kritik9,3 | — | %6,4 | 15 Şub 2013 |
39İzleyin | CVE-2025-3945İstismar yok | Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)tridium · niagara · CWE-88 | Kritik9,8 | — | %0,7 | 22 May 2025 |
39İzleyin | CVE-2025-3941İstismar yok | Improper Handling of Windows: DATA Alternate Data Streamtridium · niagara · CWE-69 | Kritik9,8 | — | %0,5 | 22 May 2025 |
39İzleyin | CVE-2025-3944İstismar yok | Incorrect Permission Assignment for Critical Resourcetridium · niagara · CWE-732 | Kritik9,8 | — | %0,5 | 22 May 2025 |
39İzleyin | CVE-2025-3936İstismar yok | Incorrect Permission Assignment for Critical Resourcetridium · niagara · CWE-732 | Kritik9,8 | — | %0,4 | 22 May 2025 |
39İzleyin | CVE-2025-3940İstismar yok | Improper Use of Validation Frameworktridium · niagara · CWE-1173 | Kritik9,8 | — | %0,4 | 22 May 2025 |
39İzleyin | CVE-2025-3937İstismar yok | Use of Password Hash with Insufficient Computational Efforttridium · niagara · CWE-916 | Kritik9,8 | — | %0,4 | 22 May 2025 |
39İzleyin | CVE-2025-3938İstismar yok | Missing Cryptographic Steptridium · niagara · CWE-325 | Kritik9,8 | — | %0,3 | 22 May 2025 |
33İzleyin | CVE-2025-3943İstismar yok | Use of GET Request Method With sensitive Query Stringstridium · niagara · CWE-598 | Yüksek7,5 | — | %10,7 | 22 May 2025 |
31İzleyin | CVE-2012-4028İstismar yok | Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restridium · niagara ax · CWE-522 | Yüksek7,8 | — | %1,6 | 16 Tem 2012 |
30İzleyin | CVE-2017-16744Kavram kanıtı | A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microstridium · niagara · CWE-22 | Yüksek7,2 | — | %6,2 | 20 Ağu 2018 |
30İzleyin | CVE-2025-3942İstismar yok | Improper Output Neutralization for Logstridium · niagara · CWE-117 | Yüksek7,5 | — | %0,3 | 22 May 2025 |
21İzleyin | CVE-2012-4027İstismar yok | Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav,tridium · niagara ax · CWE-22 | Orta5,0 | — | %2,5 | 16 Tem 2012 |
21İzleyin | CVE-2012-3024İstismar yok | Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to byptridium · niagara ax · CWE-287 | Orta5,0 | — | %2,2 | 16 Ağu 2012 |
21İzleyin | CVE-2012-3025İstismar yok | The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cooktridium · niagara ax · CWE-522 | Orta5,0 | — | %1,9 | 16 Ağu 2012 |
21İzleyin | CVE-2018-18985İstismar yok | Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2tridium · niagara · CWE-79 | Orta5,4 | — | %1,0 | 29 Oca 2019 |
21İzleyin | CVE-2025-3939İstismar yok | Observable Response Discrepancytridium · niagara · CWE-204 | Orta5,3 | — | %0,3 | 22 May 2025 |
17İzleyin | CVE-2020-14483İstismar yok | A timeout during a TLS handshake can result in the connection failing to terminate.tridium · niagara · CWE-1088 | Orta4,3 | — | %0,4 | 13 Ağu 2020 |
17İzleyin | CVE-2019-13528İstismar yok | A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-800tridium · niagara ax · CWE-285 | Orta4,4 | — | %0,4 | 24 Eyl 2019 |
- CVE-2017-1674841Planlayın
An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and pri
KritikCVSS 9,8İstismar yokEPSS %5tridium · niagara20 Ağu 2018
- CVE-2012-470139İzleyin
Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently
KritikCVSS 9,3İstismar yokEPSS %6tridium · niagara ax15 Şub 2013
- CVE-2025-394539İzleyin
Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)
KritikCVSS 9,8İstismar yokEPSS %1tridium · niagara22 May 2025
- CVE-2025-394139İzleyin
Improper Handling of Windows: DATA Alternate Data Stream
KritikCVSS 9,8İstismar yokEPSS %1tridium · niagara22 May 2025
- CVE-2025-394439İzleyin
Incorrect Permission Assignment for Critical Resource
KritikCVSS 9,8İstismar yokEPSS %1tridium · niagara22 May 2025
- CVE-2025-393639İzleyin
Incorrect Permission Assignment for Critical Resource
KritikCVSS 9,8İstismar yokEPSS %0tridium · niagara22 May 2025
- CVE-2025-394039İzleyin
Improper Use of Validation Framework
KritikCVSS 9,8İstismar yokEPSS %0tridium · niagara22 May 2025
- CVE-2025-393739İzleyin
Use of Password Hash with Insufficient Computational Effort
KritikCVSS 9,8İstismar yokEPSS %0tridium · niagara22 May 2025
- CVE-2025-393839İzleyin
Missing Cryptographic Step
KritikCVSS 9,8İstismar yokEPSS %0tridium · niagara22 May 2025
- CVE-2025-394333İzleyin
Use of GET Request Method With sensitive Query Strings
YüksekCVSS 7,5İstismar yokEPSS %11tridium · niagara22 May 2025
- CVE-2012-402831İzleyin
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access res
YüksekCVSS 7,8İstismar yokEPSS %2tridium · niagara ax16 Tem 2012
- CVE-2017-1674430İzleyin
A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Micros
YüksekCVSS 7,2Kavram kanıtıEPSS %6tridium · niagara20 Ağu 2018
- CVE-2025-394230İzleyin
Improper Output Neutralization for Logs
YüksekCVSS 7,5İstismar yokEPSS %0tridium · niagara22 May 2025
- CVE-2012-402721İzleyin
Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav,
OrtaCVSS 5,0İstismar yokEPSS %3tridium · niagara ax16 Tem 2012
- CVE-2012-302421İzleyin
Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to byp
OrtaCVSS 5,0İstismar yokEPSS %2tridium · niagara ax16 Ağu 2012
- CVE-2012-302521İzleyin
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cook
OrtaCVSS 5,0İstismar yokEPSS %2tridium · niagara ax16 Ağu 2012
- CVE-2018-1898521İzleyin
Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2
OrtaCVSS 5,4İstismar yokEPSS %1tridium · niagara29 Oca 2019
- CVE-2025-393921İzleyin
Observable Response Discrepancy
OrtaCVSS 5,3İstismar yokEPSS %0tridium · niagara22 May 2025
- CVE-2020-1448317İzleyin
A timeout during a TLS handshake can result in the connection failing to terminate.
OrtaCVSS 4,3İstismar yokEPSS %0tridium · niagara13 Ağu 2020
- CVE-2019-1352817İzleyin
A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-800
OrtaCVSS 4,4İstismar yokEPSS %0tridium · niagara ax24 Eyl 2019