description: An attacker can log into the local Niagara platform (Niagara AX Framework Versions 3.8 and prior or Niagara 4 Framework Versions 4.4 and prior) using a disabled account name and a blank password, granting the attacker administrator access to the Niagara system.
problem types: IMPROPER AUTHENTICATION CWE-287
affected:
{
product: Niagara AX Framework and Niagara 4 Framework
vendor: ICS-CERT
versions:
status: affected, version: Niagara AX Framework Versions 3.8 and prior and Niagara 4 Framework Versions 4.4 and prior
}