Tridium Niagara

Risk Summary

Successful exploitation of this vulnerability could result in a denial-of-service condition.

CVEs (1)

Remediations

• Tridium has released updates that mitigate this vulnerability and recommends users update to the versions
• Niagara 4.9.0.198
• Niagara Enterprise Security 4.9.0.60
• Updates are available by contacting the sales support channel or by contacting the Tridium support team at [email protected]
• All Tridium Niagara users for all supported platforms are encouraged to update their systems with these releases to mitigate risk. For further guidance, please contact a Tridium account manager or Customer Support.
• Updating to the latest version
• Review and validate the list of authorized users who can authenticate to Niagara.
• Allow only trained and trusted persons to have physical access to the system, including devices with connection to the system though the Ethernet port.
• If remote connections to the network are required, consider using a VPN or other means to ensure secure remote connections into the network.
• For more information please refer to Security Bulletin SB 2020-Tridium-2.

Affected Vendors

Affected Products (2)

Affected Sectors

Commercial Facilities, Critical Manufacturing, Government Facilities, Information Technology