Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500379.NASLHistoryAug 10, 2020 - 12:00 a.m.
Tridium Niagra Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
2020-08-1000:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
10
0.006 Low
EPSS
Percentile
78.4%
Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature.
File data ot_500379.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| tridium | niagra_ax_framework | 3.5 | cpe:2.3:a:tridium:niagra_ax_framework:3.5:*:*:*:*:*:*:* |
| tridium | niagra_ax_framework | 3.6 | cpe:2.3:a:tridium:niagra_ax_framework:3.6:*:*:*:*:*:*:* |
| tridium | niagra_ax_framework | 3.7 | cpe:2.3:a:tridium:niagra_ax_framework:3.7:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2012-4701
2022-10-03 16:15:33
cvelist
cvelist
CVE-2012-4701
2022-10-03 16:15:33
prion
prion
Directory traversal
2013-02-15 12:09:00
nvd
nvd
CVE-2012-4701
2013-02-15 12:09:27
nessus
nessus
Tridium Niagara AX Path Traversal (CVE-2012-4701)
2023-03-21 00:00:00
ics
ics
Tridium NiagaraAX Directory Traversal Vulnerability
2013-05-08 12:00:00