CVE-2025-3945

all versions

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on Q

7.2HIGH

CVE-2025-3944

all versions

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterpris

7.2HIGH

CVE-2025-3943

all versions

Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium

4.1MEDIUM

CVE-2025-3942

all versions

Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterpr

4.3MEDIUM

CVE-2025-3941

all versions

Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara E

5.4MEDIUM

CVE-2025-3940

all versions

Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise

5.3MEDIUM

CVE-2025-3939

all versions

Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Secu

5.3MEDIUM

CVE-2025-3938

all versions

Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security

6.8MEDIUM

CVE-2025-3937

all versions

Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tri

7.7HIGH

CVE-2025-3936

all versions

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enter

6.5MEDIUM

CVE-2020-14483

all versions

A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging an

4.3MEDIUM

CVE-2018-18985

< 4.4.93.40.2

Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Nia

5.4MEDIUM

CVE-2017-16748

<= 4.4

An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4

9.8CRITICAL

CVE-2017-16744

>= 4.0 and <= 4.4

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed

7.2HIGH