CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC for CVE-2017-16744 and CVE-2017-16748 Proof of Concept PoC CVE: 2017-16744 and 2017-16748 Date: 09/09/2019 Exploit Author: GainSec - Jon Gaines Vendor Homepage: https://www.tridium.com/ Version: Affects Tridium Niagara AX Versions: 3.8 and prior as well as Niagara 4 Versions: 4.4 and prior...

Tridium Niagara Improper Limitation of a Pathname to a Restricted Directory (CVE-2017-16744)

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform administrator credentials. This plugin only works with Tenable.ot. Please visit...

CVE-2017-16744

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform administrator credentials...

CVE-2017-16744

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform administrator credentials...

CVE-2017-16744

CVE-2017-16744 is a path-traversal vulnerability in Tridium Niagara AX (versions 3.8 and earlier) and Niagara 4 (versions 4.4 and earlier) running on Windows. The root cause is improper filtering/limitation of user-supplied pathnames, allowing an attacker with valid platform administrator credent...

Tridium Niagara

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely Vendor: Tridium Equipment: Niagara Vulnerabilities: Path Traversal, Improper Authentication 2. REPOSTED INFORMATION This advisory was originally posted to the HSIN ICS-CERT library on July 10, 2018, and is being released to the...