Tridium patches control systems bug after a year

More than 300,000 automation systems – covering lighting control, building automation and security, heating and air conditioning and more – need patching after a slew of vulnerabilities in the Tridium Niagara AX went public thanks to an ISC-CERT advisory.

The announcement of the vulnerabilities comes nearly synchronously with the announcement of the patch – and ounce again highlights the slack security attitudes endemic in the industrial control segment. According to the researchers that turned up the vulnerabilities, they had been trying to work with the vendor for a year before the advisory (PDF) was published at the CERT’s control systems page.