Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.
Weakness
The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Niagara | Tridium | 4.10u10 (including) | 4.10u10 (including) |
| Niagara | Tridium | 4.14u1 (including) | 4.14u1 (including) |
| Niagara | Tridium | 4.15 (including) | 4.15 (including) |
| Niagara_enterprise_security | Tridium | 4.10u10 (including) | 4.10u10 (including) |
| Niagara_enterprise_security | Tridium | 4.14u1 (including) | 4.14u1 (including) |
| Niagara_enterprise_security | Tridium | 4.15 (including) | 4.15 (including) |