CVE-2020-14483

Published: Aug 13, 2020Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart of Niagara (Versions 4.6.96.28, 4.7.109.20, 4.7.110.32, 4.8.0.110) and Niagara Enterprise Security (Versions 2.4.31, 2.4.45, 4.8.0.35) to correct.

Affected (7)

Products: Tridium: Niagara, Niagara Enterprise Security

Tridium

2 products

Niagara

Niagara Enterprise Security

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Tridium Niagara	Version 4.6.96.28
Tridium Niagara	Version 4.7.109.20
Tridium Niagara	Version 4.7.110.32
Tridium Niagara	Version 4.8.0.110
Tridium Niagara Enterprise Security	Version 2.4.31
Tridium Niagara Enterprise Security	Version 2.4.45
Tridium Niagara Enterprise Security	Version 4.8.0.35

Related CWEs

CWE-1088

Synchronous Access of Remote Resource without Timeout

The code has a synchronous call to a remote resource, but there is no timeout for the call, or the timeout is set to infinite.

References (2)

https://us-cert.cisa.gov/ics/advisories/icsa-20-224-03

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsa-20-224-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.