Path Traversal in Tridium Niagara Ax
CVE-2012-4027
Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.025 (83.3th percentile) — read the EPSS interpretation.
Affected products
- Tridium Niagara_ax
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Permissions Required, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Broken Link, Vendor Advisory)