During the final testing phase of Niagara 4.15, some technical issues were identified by an independent researcher that impact all supported versions of the Niagara Framework®. Tridium is working diligently to address the identified concerns. However, due to the nature of the findings, Niagara 4.15 was not released on April 10th so that they could immediately address those issues and provide you with an improved version of the offering when it is ready for release.

To support their customers with Niagara 4.14 deployments, they will be focusing their efforts on releasing an update to Niagara 4.14 on May 8th. Based on the current timeline, they are anticipating that these issues will be resolved in the upcoming days so that Niagara 4.15 can be released on May 28th.

Tridium recommends that customers immediately take the following steps to protect themselves:

Review and validate the list of users who are authorized and who can authenticate to Niagara.
Allow only trained and trusted persons to have physical access to the system, including devices that have connection to the system though the Ethernet port.
Consider using a VPN, Niagara Remote or other means to ensure secure remote connections into the network where the system is located, if remote connections are enabled.
Sign all modules and program objects provided by third-party teams.
Review the Niagara Hardening Guide and implement the recommended techniques for securing your installation.

Cybersecurity is a priority at Tridium. They are dedicated to continuously improving the security of their products and will continue to update you over the upcoming weeks.

Please reach out to us if you have any questions regarding these updates.