CVE-2012-3025

NONE

Published Aug 16, 201213y ago · Modified Jun 16, 20262w ago

Published Aug 16, 2012 13y ago

Last Modified Jun 16, 2026 2w ago

Description

The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-522

Affected Products 1

Vendor	Product	Version	Range
tridium	niagara_ax	*	≤3.6

References 2

tridium.com http://www.tridium.com/cs/tridium_news/security_patch_36

Broken LinkPatchVendor Advisory
us-cert.gov http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf

Broken LinkThird Party AdvisoryUS Government Resource

Remediation

tridium.com http://www.tridium.com/cs/tridium_news/security_patch_36

Broken LinkPatchVendor Advisory