CVE-2012-4701: Path Traversal
Directory traversal vulnerability in Tridium Niagara AX 3.5, 3.6, and 3.7 allows remote attackers to read sensitive files, and consequently execute arbitrary code, by leveraging (1) valid credentials or (2) the guest feature.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4701?
CVE-2012-4701 is considered a high severity vulnerability due to its potential for remote exploitation to read sensitive files.
How do I fix CVE-2012-4701?
To fix CVE-2012-4701, update to the latest version of Tridium Niagara AX that includes security patches addressing this vulnerability.
What versions of Tridium Niagara AX are affected by CVE-2012-4701?
CVE-2012-4701 affects Tridium Niagara AX versions 3.5, 3.6, and 3.7.
What types of attacks are possible with CVE-2012-4701?
CVE-2012-4701 allows attackers to perform directory traversal attacks, potentially enabling them to read sensitive files and execute arbitrary code.
Is authentication required to exploit CVE-2012-4701?
Yes, CVE-2012-4701 requires valid credentials or the use of the guest feature to exploit the vulnerability.