CVE-2012-3025

Related Files

ICS-CERT Advisory - Tridium Niagara Issues

Posted Aug 17, 2012

Authored by ICS-CERT | Site ics-cert.org

ICS-CERT Advisory ICSA-12-228-01 - Independent security researchers Billy Rios and Terry McCorkle have identified multiple vulnerabilities in the Tridium Niagara AX Framework software. The vulnerabilities include directory traversal, weak credential storage, session cookie weaknesses, and predictable session IDs, all of which can be exploited remotely. All known versions of the Tridium Niagara AX Framework software products are susceptible to these vulnerabilities.

tags | advisory, vulnerability

advisories | CVE-2012-4027, CVE-2012-4028, CVE-2012-3025, CVE-2012-3024

SHA-256 | a321597efe4a62df5a3a2266cf1f16eb392c55adffe8c8fa35b7747b79ea649b

Download | Favorite | View