CVE-2025-3944

🗓️ 22 May 2025 12:44:55Reported by HoneywellType

Tridium Niagara Framework and Enterprise Security vulnerable; fixed by upgrading to specific versions.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-3944	22 May 202516:07	–	circl
CNNVD	Tridium Niagara Framework和Tridium Niagara Enterprise Security 安全漏洞	22 May 202500:00	–	cnnvd
Cvelist	CVE-2025-3944 Incorrect Permission Assignment for Critical Resource	22 May 202512:44	–	cvelist
EUVD	EUVD-2025-16157	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3944	22 May 202513:15	–	nvd
Positive Technologies	PT-2025-22471 · Tridium +1 · Tridium Niagara Enterprise Security +2	22 May 202500:00	–	ptsecurity
The Hacker News	Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide	28 Jul 202504:12	–	thn
Vulnrichment	CVE-2025-3944 Incorrect Permission Assignment for Critical Resource	22 May 202512:44	–	vulnrichment

NVD

Node

tridium niagaraMatch4.10u10

tridium niagaraMatch4.14u1

tridium niagaraMatch4.15

tridium niagara_enterprise_securityMatch4.10u10

tridium niagara_enterprise_securityMatch4.14u1

tridium niagara_enterprise_securityMatch4.15

AND

blackberry qnxMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

[
  {
    "defaultStatus": "affected",
    "platforms": [
      "QNX"
    ],
    "product": "Niagara Framework",
    "vendor": "Tridium",
    "versions": [
      {
        "lessThan": "4.14.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.15.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.10.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "platforms": [
      "QNX"
    ],
    "product": "Niagara Enterprise Security",
    "vendor": "Tridium",
    "versions": [
      {
        "lessThan": "4.14.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.15.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.10.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
docs	www.docs.niagara-community.com/category/tech_bull
honeywell	www.honeywell.com/us/en/product-security

04 Jun 2025 19:27Current

7High risk

Vulners AI Score7

CVSS 3.17.2 - 9.8

EPSS0.00335

SSVC

CWE-732