Multiple Vulnerabilities in Tridium Niagara Framework Let Attacker to Collect Sensitive Data from the Network

Researchers disclosed multiple critical vulnerabilities in Tridium's Niagara Framework (consolidated into ten CVEs) that can enable privilege escalation and root remote code execution, particularly when network encryption is disabled and Syslog is unencrypted. The report details an attack chain using intercepted GET anti-CSRF tokens and JSESSIONID extraction from unencrypted Syslog, highlights high CVSS scores (up to 7.7), and urges immediate patching, network segmentation, and configuration changes to protect building automation and other critical infrastructure.