CVE-2012-4028

Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2012-07-16

Last modified

2024-09-17

Weaknesses

CWE-522

Affected products

• Niagara Ax (Tridium)

References

• http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-ri…
• https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf