Unrated severityNVD Advisory· Published May 22, 2025· Updated May 22, 2025
Use of GET Request Method With sensitive Query Strings
CVE-2025-3943
Description
Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.
Affected products
4- Range: before 4.10.11, before 4.14.2, before 4.15.1
- Range: before 4.10.11, before 4.14.2, before 4.15.1
- Tridium/Niagara Enterprise Securityv5Range: 0
- Tridium/Niagara Frameworkv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- docs.niagara-community.com/category/tech_bullmitrevendor-advisory
- honeywell.com/us/en/product-securitymitrevendor-advisory
News mentions
0No linked articles in our index yet.