[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7iT_qXzbqmgAUFGevbE46KDL4LUodTYFhWjO3IaPxoM":3,"g5a-risk:CVE-2025-3940":164},{"success":4,"data":5,"meta":161},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":28,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":76,"references":77,"referencesCount":88,"weaknesses":89,"weaknessesCount":98,"isActivelyExploited":67,"cisaInfo":28,"otxData":28,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":152,"notableEvents":153},"CVE-2025-3940","What is CVE-2025-3940?","Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.","Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux...","2025-05-22T13:15:56.87","2025-06-04T19:28:55.96",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"psirt@honeywell.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","NETWORK","LOW","NONE","UNCHANGED",5.3,"MEDIUM",null,3.9,1.4,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":37},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":12,"BaseSeverity":36,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"HIGH","CRITICAL",5.9,[],[],0.00357,[40,40,40,40,40,40,40],"Critical",[44,49,52,55,58,60,62,68,72],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"tridium","niagara","4.10u10","cpe:2.3:a:tridium:niagara:4.10u10:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"4.14u1","cpe:2.3:a:tridium:niagara:4.14u1:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"4.15","cpe:2.3:a:tridium:niagara:4.15:*:*:*:*:*:*:*",{"vendor":45,"product":56,"version":47,"criteria":57,"vulnerable":4},"niagara_enterprise_security","cpe:2.3:a:tridium:niagara_enterprise_security:4.10u10:*:*:*:*:*:*:*",{"vendor":45,"product":56,"version":50,"criteria":59,"vulnerable":4},"cpe:2.3:a:tridium:niagara_enterprise_security:4.14u1:*:*:*:*:*:*:*",{"vendor":45,"product":56,"version":53,"criteria":61,"vulnerable":4},"cpe:2.3:a:tridium:niagara_enterprise_security:4.15:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":67},"blackberry","qnx","-","cpe:2.3:o:blackberry:qnx:-:*:*:*:*:*:*:*",false,{"vendor":69,"product":70,"version":65,"criteria":71,"vulnerable":67},"linux","linux_kernel","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",{"vendor":73,"product":74,"version":65,"criteria":75,"vulnerable":67},"microsoft","windows","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",9,[78,83],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fdocs.niagara-community.com\u002Fcategory\u002Ftech_bull","Niagara-community",[82],"Permissions Required",{"url":84,"source":85,"tags":86},"https:\u002F\u002Fhoneywell.com\u002Fus\u002Fen\u002Fproduct-security#security-notices","Honeywell",[87],"Vendor Advisory",2,[90],{"id":91,"name":92,"description":93,"extendedDescription":94,"status":95,"abstraction":96,"structure":97},"CWE-1173","Improper Use of Validation Framework","The product does not use, or incorrectly uses, an input validation framework that is provided by the source language or an independent library.","Many modern coding languages provide developers with input validation frameworks to make the task of input validation easier and less error-prone. These frameworks will automatically check all input against specified criteria and direct execution to error handlers when invalid input is received. The improper use (i.e., an incorrect implementation or missing altogether) of these frameworks is not directly exploitable, but can lead to an exploitable condition if proper input validation is not performed later in the product. Not using provided input validation frameworks can also hurt the maintainability of code as future developers may not recognize the downstream input validation being used in the place of the validation framework.","Draft","Base","Simple",1,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2025-3940? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-3940, a critical severity cyber security vulnerability from 2025. Improper Use of Validation Framework vulnerability in Tr...","CVE-2025-3940, CVE-2025-3940 vulnerability, CVE-2025-3940 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, tridium security, blackberry security, linux security, microsoft security, niagara vulnerability, niagara_enterprise_security vulnerability, qnx vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2025-3940",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-3940","Cybersecurity","CVE-2025-3940, CVE-2025-3940 vulnerability, CVE-2025-3940 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126],{"Operator":127,"Negate":28,"Nodes":128},"AND",[129,144],{"Operator":130,"Negate":67,"CPEMatch":131},"OR",[132,134,136,138,140,142],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":133,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0615B9FA-E837-4C21-8968-F3273718DF7D",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":135,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BEE26A6F-876E-450D-8A5F-EF4A3EF96A13",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":137,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"00C6667A-9873-4A75-AB11-3427AA1E552D",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":139,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E694C4DB-66F7-4753-81D8-9085B5E3A207",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":141,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"506E75F5-D259-4BAC-9C1A-83C9AD54D608",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":143,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"6DF70636-5B89-4646-80F3-83C906B0EB3C",{"Operator":130,"Negate":67,"CPEMatch":145},[146,148,150],{"Vulnerable":67,"Criteria":66,"MatchCriteriaID":147,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"3642981A-848E-4DEA-A904-A83B9ED4891D",{"Vulnerable":67,"Criteria":71,"MatchCriteriaID":149,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Vulnerable":67,"Criteria":75,"MatchCriteriaID":151,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[154],{"id":155,"eventType":156,"eventTime":157,"details":158,"label":159,"color":160},"7ac9cb4a-e576-4813-af1e-a51cbaf36e77","NEW_NVD","2025-06-09T22:28:52.581781+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":162,"version":163},1792375398203,"2.0",{"score":165,"band":166,"action":167,"scoredAt":168},54,"Medium","Plan remediation","2026-10-16T07:07:24.968846+00:00"]