CVE-2012-3024

NONE
Published Aug 16, 201213y ago · Modified Jun 16, 20262w ago
Find Similar
Published Aug 16, 2012 13y ago
Last Modified Jun 16, 2026 2w ago

Description

Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-287 Improper Authentication Authentication

Affected Products 1

VendorProductVersionRange
tridiumniagara_ax* ≤3.6

References 2

  • tridium.com http://www.tridium.com/cs/tridium_news/security_patch_36
    Broken LinkPatchVendor Advisory
  • us-cert.gov http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf
    Broken LinkThird Party AdvisoryUS Government Resource

Remediation

  • tridium.com http://www.tridium.com/cs/tridium_news/security_patch_36
    Broken LinkPatchVendor Advisory