CVE-2012-4027 Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demo...
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Tridium niagara ax | All versions | No fix listed |
References
- www.washingtonpost.com permissions-required
- www.tridium.com broken-link vendor-advisory