Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.
Weakness
The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Niagara | Tridium | 4.10u10 (including) | 4.10u10 (including) |
| Niagara | Tridium | 4.14u1 (including) | 4.14u1 (including) |
| Niagara | Tridium | 4.15 (including) | 4.15 (including) |
| Niagara_enterprise_security | Tridium | 4.10u10 (including) | 4.10u10 (including) |
| Niagara_enterprise_security | Tridium | 4.14u1 (including) | 4.14u1 (including) |
| Niagara_enterprise_security | Tridium | 4.15 (including) | 4.15 (including) |