Overview :
A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000), Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000), and Niagara 4.7u1 (JACE-8000, Edge 10).
Affected Product(s) :
-
Niagara AX 3.8u4 (JACE 3e, JACE 6e, JACE 7, JACE-8000)
-
Niagara 4.4u3 (JACE 3e, JACE 6e, JACE 7, JACE-8000)
-
Niagara 4.7u1 (JACE-8000, Edge 10)
Vulnerability Details :
| CVE ID : | CVE-2019-13528 |
|---|---|
|
|
A specific utility may allow an attacker to gain read access to privileged files. |
|
|
CVE-2019-13528 has been assigned to this vulnerability. A CVSS v3 base score of 4.4 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N). |
Solution :
Tridium has released updates that mitigate these vulnerabilities and recommends users update to the versions identified below:
Niagara AX 3.8u4:
-
OS Dist: 2.7.402.2
-
NRE Config Dist: 3.8.401.1
Niagara 4.4u3:
-
OS Dist: 4.4.73.38.1 NRE Config
-
Dist: 4.4.94.14.1
Niagara 4.7u1:
-
OS Dist: (JACE 8000) 4.7.109.16.1
-
OS Dist (Edge 10): 4.7.109.18.1
-
NRE Config Dist: 4.7.110.32.1
Updates are available by contacting the sales support channel or by contacting the Tridium support team at support@tridium.com
