[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fu3ljtywYKaNy7D3p6km5vVJvy7NNZCwkCTlZs1G3s8g":3,"g5a-risk:CVE-2012-4028":107},{"success":4,"data":5,"meta":105},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":60,"weaknesses":61,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":103,"notableEvents":104},"CVE-2012-4028","What is CVE-2012-4028?","Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.","Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by usin...","2012-07-16T20:55:05.003","2026-06-16T23:44:18.05",7.8,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","COMPLETE","",null,"HIGH",10,6.9,false,[],0.01626,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"tridium","niagara_ax","*","cpe:2.3:a:tridium:niagara_ax:*:*:*:*:*:*:*:*",1,[45,50,56,58],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fwww.washingtonpost.com\u002Finvestigations\u002Ftridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks\u002F2012\u002F07\u002F11\u002FgJQARJL6dW_story.html","Washingtonpost",[49],"Permissions Required",{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.tridium.com\u002Fgalleries\u002Fbriefings\u002FNiagaraAX_Framework_Software_Security_Alert.pdf","Tridium",[54,55],"Broken Link","Vendor Advisory",{"url":46,"source":47,"tags":57},[49],{"url":51,"source":52,"tags":59},[54,55],4,[62],{"id":63,"name":64,"description":65,"extendedDescription":27,"status":66,"abstraction":67,"structure":68},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","Incomplete","Class","Simple",[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2012-4028? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2012-4028, a high severity cyber security vulnerability from 2012. Tridium Niagara AX Framework does not properly store credent...","CVE-2012-4028, CVE-2012-4028 vulnerability, CVE-2012-4028 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, tridium security, niagara_ax vulnerability","\u002Fwhat-is\u002Fcve-2012-4028",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2012-4028","Cybersecurity","CVE-2012-4028, CVE-2012-4028 vulnerability, CVE-2012-4028 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":28,"Negate":28,"Nodes":97},[98],{"Operator":99,"Negate":32,"CPEMatch":100},"OR",[101],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":102,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"EEF1B8B7-44B6-4F10-AED2-348BA097AD71",[],[],{"lastModified":11,"cacheTime":106,"version":22},1793207149246,{"score":108,"band":109,"action":110,"scoredAt":111},46,"Medium","Plan remediation","2026-07-01T10:18:18.731213+00:00"]