Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide
Researchers studying cybersecurity have found more than a dozen security flaws in Tridium's Niagara Framework that, in some cases, might let an attacker on the same network compromise the system.
According to a research released last week by Nozomi Networks Labs, these vulnerabilities can be fully exploited if a Niagara system is set incorrectly, which would disable encryption on a particular network device. They could compromise the Niagara system if they are chained together and an attacker with access to the same network, like a Man-in-the-Middle (MiTM) position, does so.
The Niagara Framework, a vendor-neutral platform created by Tridium, a separate Honeywell business, is a useful tool for building management, industrial automation, and smart infrastructure settings. It can be u...