CVE-2012-4027 | BDVDB-2026-50964 Detail

Description#

Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html
https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf

Exploit#

No public exploit known

History#

Version 12012-07-16Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.