Tridium Niagara Framework and Enterprise Security Improper Input Data Validation Vulnerability

A vulnerability allowing input data manipulation has been identified in the Tridium Niagara Framework and Niagara Enterprise Security. This issue arises from improper use of the validation framework and affects multiple platforms, including Windows, Linux, and QNX. The vulnerability is present in several versions of the Niagara Framework and Enterprise Security, prior to 4.14.2, 4.15.1, and 4.10.11.

Impact

Exploitation of this vulnerability could lead to unauthorized manipulation of input data, potentially causing unexpected behavior in the application or system.

Remediation

Users are advised to upgrade to Tridium Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.