Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4027
cve-2012-4027
directory traversal
tridium niagara ax framework
remote attackers
incorrect permissions
file reading
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
64.9%
Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file.
Affected configurations
Node
tridiumniagara_ax
| CPE | Name | Operator | Version |
|---|---|---|---|
| tridium:niagara_ax | tridium niagara ax | eq | * |
Related
nessus
nessus
Tridium Niagara AX Path Traversal (CVE-2012-4027)
2023-03-21 00:00:00
Tridium Niagra Unspecified Vulnerability
2020-08-10 00:00:00
Tridium Niagara AX Web Server Multiple Vulnerabilities
2013-07-03 00:00:00
nvd
nvd
CVE-2012-4027
2012-07-16 20:55:04
prion
prion
Directory traversal
2012-07-16 20:55:00
cvelist
cvelist
CVE-2012-4027
2022-10-03 16:15:34
ics
ics
Tridium Niagara Vulnerabilities (Update A)
2014-03-06 12:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
64.9%
Related for CVE-2012-4027