CVE-2025-3945: Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3945?
CVE-2025-3945 is considered a high-severity vulnerability due to its impact on command execution in the affected software.
How do I fix CVE-2025-3945?
To fix CVE-2025-3945, you should update the Tridium Niagara Framework or Niagara Enterprise Security to versions later than 4.14.2, 4.15.1, or 4.10.11.
What software is affected by CVE-2025-3945?
CVE-2025-3945 affects Tridium Niagara Framework and Tridium Niagara Enterprise Security versions prior to 4.14.2, 4.15.1, and 4.10.11.
What type of vulnerability is CVE-2025-3945?
CVE-2025-3945 falls under the category of Argument Injection vulnerabilities due to improper neutralization of command delimiters.
What are the potential risks of CVE-2025-3945?
The potential risks of CVE-2025-3945 include unauthorized command execution and complete system compromise if exploited.