Unrated severityNVD Advisory· Published May 22, 2025· Updated May 22, 2025
Improper Output Neutralization for Logs
CVE-2025-3942
Description
Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.
Affected products
4- Range: <4.10.11 || (>=4.14.0 <4.14.2) || (>=4.15.0 <4.15.1)
- Range: <4.10.11 || (>=4.14.0 <4.14.2) || (>=4.15.0 <4.15.1)
- Tridium/Niagara Enterprise Securityv5Range: 0
- Tridium/Niagara Frameworkv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.honeywell.com/us/en/product-securitymitrevendor-advisory
- www.tridium.com/us/en/product-securitymitrevendor-advisory
News mentions
0No linked articles in our index yet.