CVE-2019-13528: Medium severity tridium niagara vulnerability

Published Sep 24, 2019

Updated

A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), and Niagara 4.7u1 (JACE-8000, Edge 10).

Affected Software

8 affected components

Tridium Niagara AX=3.8u4

Tridium Jace-8000

Tridium Jace 3e

Tridium Jace 6e

Tridium Jace 7

Tridium Niagara4=4.4u3

Tridium Niagara4=4.7u1

Tridium Edge 10

Event History

Sep 24, 2019

CVE Published

via MITRE·09:23 PM

Data Sourced

via MITRE·09:23 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-13528?

CVE-2019-13528 has a medium severity level due to its potential to allow unauthorized read access to privileged files.

How do I fix CVE-2019-13528?

To fix CVE-2019-13528, upgrade your Tridium Niagara AX or Niagara version to the patched versions or apply the vendor-recommended mitigations.

Which versions are affected by CVE-2019-13528?

CVE-2019-13528 affects Tridium Niagara AX 3.8u4, Niagara 4.4u3, and Niagara 4.7u1.

What kind of attack can exploit CVE-2019-13528?

CVE-2019-13528 can be exploited by an attacker to gain unauthorized read access to sensitive files.

Is there a workaround for CVE-2019-13528?

Currently, there are no specific workarounds for CVE-2019-13528 other than upgrading to a secure version.