cbcvebase.
CVE-2025-3939
published 2025-05-22

CVE-2025-3939: Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX…

PriorityP428medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.26%
17.4th percentile
Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.

Affected

12 ranges
VendorProductVersion rangeFixed in
tridiumniagara——
tridiumniagara——
tridiumniagara——
tridiumniagara_enterprise_security< 4.14.24.14.2
tridiumniagara_enterprise_security< 4.15.14.15.1
tridiumniagara_enterprise_security< 4.10.114.10.11
tridiumniagara_enterprise_security——
tridiumniagara_enterprise_security——
tridiumniagara_enterprise_security——
tridiumniagara_framework< 4.14.24.14.2
tridiumniagara_framework< 4.15.14.15.1
tridiumniagara_framework< 4.10.114.10.11
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.