CVE-2012-4028
tridium niagara ax: no CVSS score yet. EPSS 1.6% chance of exploitation in the next 30 days.
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
- CWE
- CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tridium:niagara_ax
References
- http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html
- https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf
- http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html
- https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf