| Package | Affected versions | Patched versions |
|---|---|---|
| niagara | = 4.10u10= 4.14u1= 4.15 | |
| niagara enterprise security | = 4.10u10= 4.14u1= 4.15 |
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free