CVE-2012-4701

CVE-2012-4701 is a directory traversal vulnerability affecting Tridium Niagara AX versions 3.5, 3.6, and 3.7. This flaw allows remote attackers, with either valid credentials or by exploiting the guest feature, to read sensitive files and potentially execute arbitrary code. With a CVSS score of 9.3, it is considered critical due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.