Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500381.NASLHistoryAug 10, 2020 - 12:00 a.m.
Tridium Niagara Improper Authentication
2020-08-1000:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
7
0.015 Low
EPSS
Percentile
86.9%
An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system.
File data ot_500381.naslRelated
cvelist
cvelist
CVE-2017-16748
2018-08-16 00:00:00
prion
prion
Design/Logic Flaw
2018-08-20 21:29:00
nvd
nvd
CVE-2017-16748
2018-08-20 21:29:00
cve
cve
CVE-2017-16748
2018-08-20 21:29:00
nessus
nessus
Tridium Niagara Improper Authentication (CVE-2017-16748)
2023-03-21 00:00:00
ics
ics
Johnson Controls Facility Explorer
2019-01-22 12:00:00
Tridium Niagara
2018-10-30 12:00:00