Detections
Analytics
Tridium Niagara AX Web Server < 3.5.40.3 / 3.6 < 3.6.47.3 Multiple Vulnerabilities
medium Nessus Network Monitor Plugin ID 8348
Synopsis
A vulnerable version of the Tridium Niagara AX Web Server has been detected.Description
The detected version of Tridium Niagara AX is affected by the following vulnerabilities:- A directory traversal vulnerability exists that allows access to files outside of the intended folders including the file that stores system usernames and passwords. (CVE-2012-4027)
- The system insecurely stores user authentication credentials in 'config.bog'. (CVE-2012-4028)
- Usernames and passwords are stored in plaintext using Base64 encoding in client side cookies. (CVE-2012-3025)
- The software generates predictable session IDs. (CVE-2012-3024)
Solution
Upgrade to the latest version of Niagara AX or apply the appropriate security patch per Tridium's security advisory.See Also
https://community.niagara-central.com/ord?portal:/dev/wiki/Niagara_AX_3.5_and_3.6_Security_Patches
Plugin Details
Severity: Medium
ID: 8348
Family: SCADA
Published: 8/1/2014
Updated: 3/6/2019
Nessus ID: 67144
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.1
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:C/A:N
CVSS v3
Risk Factor: Medium
Base Score: 5.9
Temporal Score: 5.5
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:tridium:niagra_ax_framework
Patch Publication Date: 12/18/2012
Vulnerability Publication Date: 8/15/2012
Reference Information
CVE: CVE-2012-3024, CVE-2012-3025, CVE-2012-4027, CVE-2012-4028