Tridium Niagara Ax vulnerabilities

• tridium niagara, niagara ax, niagara4 +2 more A specific utility may allow an attacker to gain read access to privileged files in the Niagara... CVE-2019-13528 4.4 MediumSeptember 24, 2019
• tridium niagara, niagara enterprise security, niagara enterprise security 2.3u1, all versions prior to 2.3.118.6, niagara ax 3.8u4, all versions prior to 3.8.401.1, niagara 4.4u2, all versions prior to 4.4.93.40.2, and niagara 4.6, all versions prior to 4.6.96.28.4 +1 more +3 more Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all... CVE-2018-18985 5.4 MediumJanuary 29, 2019
• tridium niagara, niagara ax framework, ics-cert niagara ax framework and niagara 4 framework +2 more An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior... CVE-2017-16748 9.8 CriticalAugust 20, 2018
• tridium niagara, ics-cert niagara ax framework and niagara 4 framework, tridium niagara ax framework +2 more A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems... CVE-2017-16744 Public exploit 7.2 HighAugust 20, 2018
• tridium niagara ax Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers... CVE-2012-4701 9.3 HighFebruary 15, 2013
• tridium niagara ax The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64... CVE-2012-3025 5.0 MediumAugust 16, 2012
• tridium niagara ax Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys... CVE-2012-3024 5.0 MediumAugust 16, 2012
• tridium niagara ax Tridium Niagara AX Framework does not properly store credential data, which allows context... CVE-2012-4028 7.8 HighJuly 16, 2012
• tridium niagara ax Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read... CVE-2012-4027 5.0 MediumJuly 16, 2012