[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMT349JKe9xYO4uMdl4b6ToEEq_7VjL1yaaws4p5omdQ":3,"g5a-risk:CVE-2025-3941":159},{"success":4,"data":5,"meta":156},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":28,"epssTimeSeries":42,"severity":44,"affectedProducts":45,"affectedProductsCount":70,"references":71,"referencesCount":82,"weaknesses":83,"weaknessesCount":82,"isActivelyExploited":69,"cisaInfo":28,"otxData":28,"relatedBlogPosts":98,"seoMetadata":99,"configurations":124,"relatedVendorCves":147,"notableEvents":148},"CVE-2025-3941","What is CVE-2025-3941?","Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11.Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.","Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windo...","2025-05-22T13:15:57","2025-06-04T19:28:23.77",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":39,"CVSSMetricV2":40,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"psirt@honeywell.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N","NETWORK","LOW","NONE","UNCHANGED",5.4,"MEDIUM",null,2.8,2.5,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":12,"BaseSeverity":36,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"HIGH","CRITICAL",3.9,5.9,[],[],0.00502,[43,43,43,43,43,43,41],0.00528,"Critical",[46,51,54,57,60,62,64],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"tridium","niagara","4.10u10","cpe:2.3:a:tridium:niagara:4.10u10:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":52,"criteria":53,"vulnerable":4},"4.14u1","cpe:2.3:a:tridium:niagara:4.14u1:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":55,"criteria":56,"vulnerable":4},"4.15","cpe:2.3:a:tridium:niagara:4.15:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":49,"criteria":59,"vulnerable":4},"niagara_enterprise_security","cpe:2.3:a:tridium:niagara_enterprise_security:4.10u10:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":52,"criteria":61,"vulnerable":4},"cpe:2.3:a:tridium:niagara_enterprise_security:4.14u1:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":55,"criteria":63,"vulnerable":4},"cpe:2.3:a:tridium:niagara_enterprise_security:4.15:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":67,"criteria":68,"vulnerable":69},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",false,7,[72,77],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fdocs.niagara-community.com\u002Fcategory\u002Ftech_bull","Niagara-community",[76],"Permissions Required",{"url":78,"source":79,"tags":80},"https:\u002F\u002Fwww.honeywell.com\u002Fus\u002Fen\u002Fproduct-security#security-notices","Honeywell",[81],"Vendor Advisory",2,[84,92],{"id":85,"name":86,"description":87,"extendedDescription":88,"status":89,"abstraction":90,"structure":91},"CWE-706","Use of Incorrectly-Resolved Name or Reference","The product uses a name or reference to access a resource, but the name\u002Freference resolves to a resource that is outside of the intended control sphere.","","Incomplete","Class","Simple",{"id":93,"name":94,"description":95,"extendedDescription":96,"status":89,"abstraction":97,"structure":91},"CWE-69","Improper Handling of Windows ::DATA Alternate Data Stream","The product does not properly prevent access to, or detect usage of, alternate data streams (ADS).","An attacker can use an ADS to hide information about a file (e.g. size, the name of the process) from a system or file browser tools such as Windows Explorer and 'dir' at the command line utility. Alternately, the attacker might be able to bypass intended access restrictions for the associated data fork.","Variant",[],{"title":100,"metaDescription":101,"keywords":102,"canonicalUrl":103,"structuredData":104},"What is CVE-2025-3941? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-3941, a critical severity cyber security vulnerability from 2025. Improper Handling of Windows ::DATA Alternate Data Strea...","CVE-2025-3941, CVE-2025-3941 vulnerability, CVE-2025-3941 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, tridium security, microsoft security, niagara vulnerability, niagara_enterprise_security vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2025-3941",{"@context":105,"@type":106,"headline":100,"description":101,"datePublished":10,"dateModified":11,"author":107,"publisher":111,"about":115,"mainEntityOfPage":119,"articleSection":122,"keywords":123},"https:\u002F\u002Fschema.org","TechArticle",{"@type":108,"name":109,"url":110},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":108,"name":109,"url":110,"logo":112},{"@type":113,"url":114},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":116,"name":6,"description":117,"additionalType":118},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":120,"@id":121},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-3941","Cybersecurity","CVE-2025-3941, CVE-2025-3941 vulnerability, CVE-2025-3941 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[125],{"Operator":126,"Negate":28,"Nodes":127},"AND",[128,143],{"Operator":129,"Negate":69,"CPEMatch":130},"OR",[131,133,135,137,139,141],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":132,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0615B9FA-E837-4C21-8968-F3273718DF7D",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":134,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BEE26A6F-876E-450D-8A5F-EF4A3EF96A13",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":136,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"00C6667A-9873-4A75-AB11-3427AA1E552D",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":138,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E694C4DB-66F7-4753-81D8-9085B5E3A207",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":140,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"506E75F5-D259-4BAC-9C1A-83C9AD54D608",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":142,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"6DF70636-5B89-4646-80F3-83C906B0EB3C",{"Operator":129,"Negate":69,"CPEMatch":144},[145],{"Vulnerable":69,"Criteria":68,"MatchCriteriaID":146,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[149],{"id":150,"eventType":151,"eventTime":152,"details":153,"label":154,"color":155},"6bdcfb43-dcd4-4326-88ad-57197a99ab11","NEW_NVD","2025-06-09T22:28:52.581781+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":157,"version":158},1792383604602,"2.0",{"score":160,"band":161,"action":162,"scoredAt":163},54,"Medium","Plan remediation","2026-10-16T07:07:24.969234+00:00"]