CVE-2025-3942

Improper Output Neutralization for Logs

State: Published
Severity: 4.3 Medium
Published: May 22, 2025
Updated: May 22, 2025
Reserved: Apr 25, 2025

Description

Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	Honeywell

Weaknesses

CWE-117 Improper Output Neutralization for Logs

Affected Products

Product	Versions
Niagara FrameworkTridium	before 4.14.2Affected before 4.15.1Affected before 4.10.11Affected
Niagara Enterprise SecurityTridium	before 4.14.2Affected before 4.15.1Affected before 4.10.11Affected

References

https://www.tridium.com/us/en/product-securityvendor-advisory
https://www.honeywell.com/us/en/product-security#security-noticesvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.