CVE-2025-3944

🗓️ 22 May 2025 13:15:57Reported by [email protected]Type

Vulnerability CVE-2025-3944 in Tridium Niagara Framework allows file manipulation due to permission issues.

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the device management platform for systems involving heating, ventilation, and air conditioning, lighting, and energy consumption within the Niagara Framework, along with the Niagara Enterprise Security tools for access control and security, stems from incorrect assignment of permissions to critical resources. This allows attackers to gain unauthorized access to protected information, enhance their privileges, and execute arbitrary code.	29 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-3944	22 May 202516:07	–	circl
CNNVD	Tridium Niagara Framework和Tridium Niagara Enterprise Security 安全漏洞	22 May 202500:00	–	cnnvd
CVE	CVE-2025-3944	22 May 202512:44	–	cve
Cvelist	CVE-2025-3944 Incorrect Permission Assignment for Critical Resource	22 May 202512:44	–	cvelist
EUVD	EUVD-2025-16157	3 Oct 202520:07	–	euvd
Positive Technologies	PT-2025-22471 · Tridium +1 · Tridium Niagara Enterprise Security +2	22 May 202500:00	–	ptsecurity
The Hacker News	Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide	28 Jul 202504:12	–	thn
Vulnrichment	CVE-2025-3944 Incorrect Permission Assignment for Critical Resource	22 May 202512:44	–	vulnrichment