CVEvulnerability
CVE-2012-4701
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-02-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature.
Affected configurations
• tridium niagara ax 3.5
• tridium niagara ax 3.6
• tridium niagara ax 3.7
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://ics-cert.us-cert.gov/pdf/ICSA-13-045-01.pdf Broken Link, Third Party Advisory, US Government Resource
- https://www.niagara-central.com/ord?portal:/dev/wiki/Niagara_AX_Security_Patch_11-Feb-2013 Broken Link
- http://ics-cert.us-cert.gov/pdf/ICSA-13-045-01.pdf Broken Link, Third Party Advisory, US Government Resource
- https://www.niagara-central.com/ord?portal:/dev/wiki/Niagara_AX_Security_Patch_11-Feb-2013 Broken Link