CVE-2012-4028
Tridium Niagara AX Framework does not properly store credential data, which allows context...
CVE-2012-4028 is a high vulnerability (CVSS 7.8) in Tridium Niagara Ax, published July 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.63%, the 76th percentile. No source names a fixed version.
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
Exploit likelihood
What each source reports
NVD Score used
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- Record
CVE-2012-4028- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:C/I:N/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
CVE List No score
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- Record
CVE-2012-4028- Updated
- 2026-11-02
EUVDEUVD-2012-3972 No score
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- Record
EUVD-2012-3972- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cxq6-hjjh-rjpm No score
Tridium Niagara AX Framework does not properly store credential data, which allows context...
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- Record
GHSA-cxq6-hjjh-rjpm- Weakness
- CWE-522
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html
tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf
nvd.nist.gov/vuln/detail/CVE-2012-4028
github.com/advisories/GHSA-cxq6-hjjh-rjpm