Tridium 漏洞

时间轴

类型

Not Defined8

产品

Tridium Niagra Ax Framework4
Tridium Niagara AX2
Tridium Niagra 42
Tridium Niagra AX Framework2

修正

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined8

易受攻击性

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined8

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network8

身份验证

Not Defined0
High0
Low0
None8

用户交互

Not Defined0
Required0
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤64
≤70
≤80
≤92
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤64
≤70
≤80
≤92
≤102

VulDB

≤10
≤20
≤30
≤40
≤50
≤64
≤70
≤82
≤90
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k0
<2k2
<5k6
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k8
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (6): Niagara (1), Niagara AX (3), Niagara Enterprise Security (1), Niagra 4 (2), Niagra AX Framework (1), Niagra Ax Framework (4)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2019-01-294.84.6Tridium Niagara Enterprise Security/Niagara AX/Niagara 跨网站脚本未知Not DefinedOfficial Fix0.000610.00CVE-2018-18985
2018-08-208.58.5Tridium Niagara AX/Niagra 4 弱身份验证未知Not DefinedNot Defined0.014860.07CVE-2017-16748
2018-08-206.76.7Tridium Niagara AX/Niagra 4 目录遍历未知Not DefinedNot Defined0.002560.03CVE-2017-16744
2013-02-1510.010.0Tridium Niagra AX Framework 目录遍历未知Not DefinedNot Defined0.005690.02CVE-2012-4701
2012-08-165.35.3Tridium Niagra Ax Framework Default Configuration 弱加密未知Not DefinedNot Defined0.001600.00CVE-2012-3025
2012-08-165.35.3Tridium Niagra Ax Framework 弱身份验证未知Not DefinedNot Defined0.001240.00CVE-2012-3024
2012-07-167.57.5Tridium Niagra Ax Framework Access Restriction Stored 权限升级未知Not DefinedNot Defined0.002780.00CVE-2012-4028
2012-07-165.35.3Tridium Niagra Ax Framework 权限升级未知Not DefinedNot Defined0.002310.00CVE-2012-4027

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!