Tridium Niagara

An attacker with local access could read, modify, or delete critical configuration files and gain administrative control of the Niagara platform, potentially allowing them to alter building automation settings, disable safety interlocks, or disrupt facility operations.

Building automation and facilities management operators using Tridium Niagara platforms (Niagara 4 or AX) for HVAC, lighting, fire safety, or energy management control should be concerned. Municipalities, hospitals, universities, and commercial facilities relying on Niagara for integrated building systems are affected.

An attacker with local file system access (via USB, local console, or lateral movement after compromising another system on the network) can exploit path traversal to navigate outside intended directories and access or modify sensitive Niagara configuration and authentication files. Once authentication files are modified, the attacker gains administrator-level access to the Niagara system and can change operational parameters.