CVE-2012-4028
Tridium Niagara AX Framework does not properly store credential data, which allows context...
CVE-2012-4028 is a high vulnerability (CVSS 7.8) in Tridium Niagara Ax, published July 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.63%, the 76th percentile. No source names a fixed version.
- Severity
- 7.8 HighCVSS 2.0, NVD
- Exploit chance
- 1.63%EPSS, 76th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- Record
CVE-2012-4028- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:C/I:N/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
CVE ListNo score
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- Record
CVE-2012-4028- Updated
- 2026-11-02
EUVDEUVD-2012-3972No score
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- Record
EUVD-2012-3972- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cxq6-hjjh-rjpmNo score
Tridium Niagara AX Framework does not properly store credential data, which allows context...
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
- Record
GHSA-cxq6-hjjh-rjpm- Weakness
- CWE-522
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html
tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf
nvd.nist.gov/vuln/detail/CVE-2012-4028
github.com/advisories/GHSA-cxq6-hjjh-rjpm