High ICSA-19-262-01 2 CVEs

Tridium Niagara

Published Sep 19, 2019 · Updated Sep 19, 2019

Vendor: Tridium Product: Niagara Product: Niagara AX

Summary

Successful exploitation of these vulnerabilities could allow a local user to escalate their privileges.

Vulnerabilities 2

High 7.8

CVE-2019-8998

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the…

BlackBerry QNX Software Development Platform (QNX SDP)

Jul 12, 2019
Unscored —

CVE-2019-13528

A specific utility may allow an attacker to gain read access to privileged files in the Niagara AX 3.8u4 (JACE 3e, JACE…

Sep 24, 2019

Revision history

2019-09-19 #1
ICSA-19-262-01 Tridium Niagara

References

ICS Advisory ICSA-19-262-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-262-01
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B