Tridium Niagara AX Web Server < 126.96.36.199 / 3.6 < 188.8.131.52 / 3.7 < 184.108.40.206 Directory Traversal Vulnerability
High Nessus Network Monitor Plugin ID 8349
A vulnerable version of the Tridium Niagara AX Web Server has been detected.
The detected version of Tridium Niagara AX Web Server contains a directory traversal vulnerability which may allow a remote attacker to gain access to sensitive files including 'config.bog'. The 'config.bog' file contains information which could be used to gain control of the system.
Upgrade to the latest version of Niagara AX or apply the appropriate security patch per Tridium's security advisory.