CVE-2012-3024 Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Tridium niagara ax | <= 3.6 | No fix listed |
References
- www.tridium.com broken-link patch vendor-advisory
- www.us-cert.gov broken-link third-party-advisory us-government-resource