cbcvebase.
CVE-2025-3938
published 2025-05-22

CVE-2025-3938: Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows…

PriorityP357critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.32%
23.5th percentile
Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.

Affected

12 ranges
VendorProductVersion rangeFixed in
tridiumniagara——
tridiumniagara——
tridiumniagara——
tridiumniagara_enterprise_security< 4.14.24.14.2
tridiumniagara_enterprise_security< 4.15.14.15.1
tridiumniagara_enterprise_security< 4.10.114.10.11
tridiumniagara_enterprise_security——
tridiumniagara_enterprise_security——
tridiumniagara_enterprise_security——
tridiumniagara_framework< 4.14.24.14.2
tridiumniagara_framework< 4.15.14.15.1
tridiumniagara_framework< 4.10.114.10.11
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.