CVE-2012-3024: Tridium Niagara Ax

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.

Affected products

• Tridium Niagara Ax: up to and including 3.6

Published 2012-08-16. Last modified 2026-06-16.