1. Home
  2. CVE Database
  3. CVE-2025-3937
HIGH · 7.7

CVE-2025-3937

Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptan...

Vulnerability Description

Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2, before 4.15.1, before 4.10.11. Tridium recommends upgrading to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.

CVSS Score

7.7

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
TridiumNiagara4.10u10
TridiumNiagara Enterprise Security4.10u10
BlackberryQnx-
LinuxLinux Kernel-
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-916

References

FAQ

What is CVE-2025-3937?

CVE-2025-3937 is a vulnerability with a CVSS score of 7.7 (HIGH). Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptan...

How severe is CVE-2025-3937?

CVE-2025-3937 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-3937?

Check the references section above for vendor advisories and patch information. Affected products include: Tridium Niagara, Tridium Niagara Enterprise Security, Blackberry Qnx, Linux Linux Kernel, Microsoft Windows.