CVE-2020-14483: Medium severity tridium niagara vulnerability

Published Aug 13, 2020

Updated

A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara Enterprise Security (Versions 2.4.31, 2.4.45, 4.8.0.35) to correct.

Affected Software

9 affected components

Tridium Niagara: Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110

Tridium Niagara Enterprise Security: Versions 2.4.31, 2.4.45, 4.8.0.35

Tridium Niagara=4.6.96.28

Tridium Niagara=4.7.109.20

Tridium Niagara=4.7.110.32

Tridium Niagara=4.8.0.110

Tridium Niagara Enterprise Security=2.4.31

Tridium Niagara Enterprise Security=2.4.45

Tridium Niagara Enterprise Security=4.8.0.35

Event History

Aug 13, 2020

CVE Published

via MITRE·02:41 PM

Data Sourced

via MITRE·02:41 PM

DescriptionWeakness

Aug 4, 2024

Data Sourced

via ICS·12:56 PM

SeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

ICSA-20-224-03

Frequently Asked Questions

What is CVE-2020-14483 vulnerability about?

A timeout during a TLS handshake can result in the connection failing to terminate and can hang a Niagara thread, requiring a manual restart of Niagara and Niagara Enterprise Security.

What versions of Tridium Niagara are affected by CVE-2020-14483?

Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110 of Tridium Niagara are affected.

How severe is CVE-2020-14483 vulnerability?

The severity of CVE-2020-14483 vulnerability is rated as 4.3 (medium).

How can I mitigate CVE-2020-14483 vulnerability?

To mitigate CVE-2020-14483, affected systems need to be manually restarted after a hang occurs during a TLS handshake timeout.

Where can I find more information about CVE-2020-14483 vulnerability?

You can find more information about CVE-2020-14483 vulnerability at the US-CERT CISA website.