A vulnerability has been reported in Niagara Framework, which can be exploited by malicious people to disclose system information.

Certain unspecified input is not properly verified before being used to read files. This can be exploited to disclose the contents of arbitrary files via directory traversal sequences.

Solution
Apply fix (see vendor's advisory for details).

Provided and/or discovered by
The vendor credits Billy Rios and Terry McCorkle via ICS-CERT.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Tridium:
https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf
https://www.niagara-central.com/ord?portal:/dev/wiki/Niagara_AX_3.5_and_3.6_Security_Patches

ICS-CERT:
http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01.pdf

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers