What is CVE-2020-14483?

CVE-2020-14483 is a medium-severity vulnerability in Tridium Niagara, classified under CWE-1088. CVSS score: 4.3/10. Published 2020-08-13.

How severe is CVE-2020-14483?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Tridium Niagara

CVE-2020-14483

A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara En…

EPSS: 0.004 (33.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Tridium Niagara — versions 4.6.96.28, 4.7.109.20, 4.7.110.32
Tridium Niagara_enterprise_security — versions 2.4.31, 2.4.45, 4.8.0.35
N/a Niagara — versions Niagara: Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110 and Niagara Enterprise Security: Versions 2.4.31, 2.4.45, 4.8.0.35

Weakness classification (CWE)

CWE-1088

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-14483?: CVE-2020-14483 is a medium-severity vulnerability in Tridium Niagara, classified under CWE-1088. CVSS score: 4.3/10. Published 2020-08-13.
How severe is CVE-2020-14483?: Medium severity. CVSS v3 base score is 4.3 out of 10.