description: A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform (administrator) credentials.
problem types: IMPROPER LIMITATION OF A PATHNAME TO A RESTRICTED DIRECTORY ('PATH TRAVERSAL') CWE-22
affected:
{
product: Niagara AX Framework and Niagara 4 Framework
vendor: ICS-CERT
versions:
status: affected, version: Niagara AX Framework Versions 3.8 and prior and Niagara 4 Framework Versions 4.4 and prior
}