CVE-2012-4027
Tridium Niagara AX Framework - Path Traversal via Incorrect Folder Permissions
Title source: llmDescription
Directory traversal vulnerability in Tridium Niagara AX Framework allows remote attackers to read files outside of the intended images, nav, and px folders by leveraging incorrect permissions, as demonstrated by reading the config.bog file.
References (2)
Core 2
Core References
Permissions Required x_refsource_misc
http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html
Broken Link, Vendor Advisory x_refsource_confirm
https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf
Scores
EPSS
0.0254
EPSS Percentile
83.1%
Details
CWE
CWE-22
Status
published
Products (1)
tridium/niagara_ax
Published
Jul 16, 2012
Tracked Since
Feb 18, 2026