CVE-2025-3945: falha de alta gravidade em Tridium Niagara Framework
Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 0.6%
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVEs relacionadas — Tridium Niagara Framework
No mesmo produto, das mais perigosas para as menos.
CVE-2025-3943MEDIUMUse of GET Request Method With sensitive Query StringsEPSS 11.4%CVE-2025-3941MEDIUMImproper Handling of Windows: DATA Alternate Data StreamEPSS 0.5%CVE-2025-3944HIGHIncorrect Permission Assignment for Critical ResourceEPSS 0.5%CVE-2025-3940MEDIUMImproper Use of Validation FrameworkEPSS 0.4%CVE-2025-3936MEDIUMIncorrect Permission Assignment for Critical ResourceEPSS 0.4%CVE-2025-3937HIGHUse of Password Hash with Insufficient Computational EffortEPSS 0.3%