CVE-2025-3944

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-3944
Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://docs.niagara-community.com/category/tech_bull Permissions Required
https://www.honeywell.com/us/en/product-security#security-notices Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:tridium:niagara:4.10u10:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara:4.14u1:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara:4.15:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara_enterprise_security:4.10u10:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara_enterprise_security:4.14u1:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara_enterprise_security:4.15:*:*:*:*:*:*:*
OR cpe:2.3:o:blackberry:qnx:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

04 Jun 2025, 19:27

Type Values Removed Values Added
References () https://docs.niagara-community.com/category/tech_bull - () https://docs.niagara-community.com/category/tech_bull - Permissions Required
References () https://www.honeywell.com/us/en/product-security#security-notices - () https://www.honeywell.com/us/en/product-security#security-notices - Vendor Advisory
CPE cpe:2.3:a:tridium:niagara_enterprise_security:4.15:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara:4.10u10:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara:4.14u1:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara:4.15:*:*:*:*:*:*:*
cpe:2.3:o:blackberry:qnx:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara_enterprise_security:4.14u1:*:*:*:*:*:*:*
cpe:2.3:a:tridium:niagara_enterprise_security:4.10u10:*:*:*:*:*:*:*
First Time Linux
Tridium niagara Enterprise Security
Blackberry
Tridium niagara
Linux linux Kernel
Microsoft windows
Microsoft
Tridium
Blackberry qnx

23 May 2025, 15:55

Type Values Removed Values Added
Summary
  • (es) Vulnerabilidad de asignación incorrecta de permisos para recursos críticos en Tridium Niagara Framework en QNX, Tridium Niagara Enterprise Security en QNX permite la manipulación de archivos. Este problema afecta a Niagara Framework: versiones anteriores a la 4.14.2, 4.15.1 y 4.10.11; Niagara Enterprise Security: versiones anteriores a la 4.14.2, 4.15.1 y 4.10.11. Tridium recomienda actualizar a Niagara Framework y Enterprise Security a las versiones 4.14.2u2, 4.15.u1 o 4.10u.11.

22 May 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-22 13:15

Updated : 2025-06-04 19:27

NVD link : CVE-2025-3944

Mitre link : CVE-2025-3944

CVE.ORG link : CVE-2025-3944

JSON object : View

Products Affected

tridium

  • niagara_enterprise_security
  • niagara

linux

  • linux_kernel

microsoft

  • windows

blackberry

  • qnx
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource