CVE-2017-16744 A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid pla...
HighCVSS 7.2
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Tridium niagara | >= 4.0, <= 4.4 | No fix listed |
| Tridium niagara ax framework | <= 3.8 | No fix listed |
| ICS-CERT Niagara AX Framework and Niagara 4 Framework | = Niagara AX Framework Versions 3.8 and prior and Niagara 4 Framework Versions 4.4 and prior | No fix listed |
References
- 105101 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource vdb-entry
- ics-cert.us-cert.gov