CVE-2017-16748

CVE-2017-16748 affects Tridium Niagara AX/Niagara 4 platforms: Niagara AX Framework 3.8 and earlier and Niagara 4 Framework 4.4 and earlier. The issue is improper authentication where an attacker can log in using a disabled account name with a blank password and gain administrator privileges on t...

CVE-2017-16744

CVE-2017-16744 is a path-traversal vulnerability in Tridium Niagara AX (versions 3.8 and earlier) and Niagara 4 (versions 4.4 and earlier) running on Windows. The root cause is improper filtering/limitation of user-supplied pathnames, allowing an attacker with valid platform administrator credent...

CVE-2018-18985

The CVE-2018-18985 issue affects Tridium Niagara products: Niagara Enterprise Security 2.3u1, Niagara AX 3.8u4, Niagara 4.4u2, and Niagara 4.6, all versions prior to the specified deltas (2.3.118.6, 3.8.401.1, 4.4.93.40.2, 4.6.96.28.4). The vulnerability is an improper neutralization of input dur...