CVE-2025-3936

Summary

Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.

Affected Software

VendorProductVersion RangeStatus
TridiumNiagara Framework0 < 4.14.2affected
TridiumNiagara Framework0 < 4.15.1affected
TridiumNiagara Framework0 < 4.10.11affected
TridiumNiagara Enterprise Security0 < 4.14.2affected
TridiumNiagara Enterprise Security0 < 4.15.1affected
TridiumNiagara Enterprise Security0 < 4.10.11affected

Weaknesses

  • CWE-732: CWE-732 Incorrect Permission Assignment for Critical Resource

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References