// Workers AI · dad joke modeWhat did Tridium say to its date? You're a triple threat.
 | |
| Type | Subsidiary |
|---|---|
| Industry | Building automation |
| Founded | 1995 |
| Founder | John Sublett |
| Headquarters | , U.S. |
| Products | Niagara Framework |
| Parent | Honeywell |
| Website | tridium |
Tridium Inc. is an American engineering hardware and software company based in Richmond, Virginia, whose products facilitate and integrate the automation of building and other engineering control systems. Since November 2005, the company has operated as an independent business entity of Honeywell International Inc.[1]
History
[edit]Tridium Inc. was founded in 1995. In 1999, Tridium launched the Niagara Framework, a software infrastructure that connects all systems and devices to a central console.[2]
In 2002, John Petze became president and CEO, replacing Jerry Frank.[3]
The company was acquired by Honeywell International Inc in 2005.[4]
Products
[edit]Tridium's products facilitate by integrating building automation using open and proprietary communications protocols such as Modbus, Lonworks and BACnet.[5]
Tridium is the developer of Niagara Framework. The Niagara Framework is a universal software infrastructure that allows building controls integrators, HVAC and mechanical contractors to build custom, web-enabled applications for accessing, automating and controlling smart devices real-time via local network or over the Internet.[6][7]
Security
[edit]In July 2012, an investigation by The Washington Post reported that an unknown number of networks running Niagara were vulnerable to hacking, despite the framework's widespread use – by the newspaper's count, more than 11 million devices in 52 countries were connected through Niagara at the time, including systems in U.S. federal government buildings, U.S. military installations, and hospitals.[6] According to the report, independent security researchers Billy Rios and Terry McCorkle identified a directory traversal vulnerability that allowed remote attackers to download and decrypt Niagara user names and passwords, and reported it to the U.S. Department of Homeland Security, which recommended that Tridium improve customer security training.[6]
Tridium co-founder and chief technology officer John Sublett said the company learned of related vulnerabilities roughly a year earlier, after an audit by a Niagara customer managing Pentagon facilities, and issued a security bulletin to customers describing mitigation measures around the time of the article's publication.[6]
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) subsequently issued Industrial Control Systems advisories documenting further vulnerabilities in Niagara, including a directory traversal vulnerability in NiagaraAX,[8] a cross-site scripting vulnerability (CVE-2018-18985) affecting Niagara Enterprise Security, Niagara AX, and Niagara 4,[9] and a denial-of-service vulnerability.[10]
In July 2025, researchers at Nozomi Networks Labs disclosed ten vulnerabilities in Niagara Framework and Niagara Enterprise Security, affecting versions up to 4.10u10, 4.14u1, and 4.15.[11] Several of the flaws received a CVSS score of 9.8, and two of them could reportedly be chained to achieve root-level remote code execution on affected devices under certain misconfigurations, such as disabled encryption on a network device.[12] Honeywell released patched versions of Niagara Framework and Niagara Enterprise Security (4.10u11, 4.14u2, and 4.15u1) in response.[12]
References
[edit]- ↑ "Honeywell acquires Tridium". Control Engineering. December 27, 2005. Retrieved October 11, 2024.
- ↑ Controls, Mid-Atlantic. "The Ultimate Guide to the Niagara Framework - MACC". info.midatlanticcontrols.com. Retrieved October 11, 2024.
- ↑ "Tridium Appoints New President and CEO". Contracting Business. October 1, 2002. Retrieved October 11, 2024.
- ↑ "Honeywell Completes Acquisition Of Tridium | Plumbing & Mechanical". www.pmmag.com. Retrieved October 11, 2024.
- ↑ Casey, Terry (June 2004). "Tridium takes Building Controls into the 21st Century on Landmark Dubai Project". Retrieved May 18, 2017.
- 1 2 3 4 O'Harrow, Robert Jr. (July 11, 2012). "Tridium's Niagara Framework: Marvel of connectivity illustrates new cyber risks". The Washington Post. Retrieved August 13, 2015.
- ↑ Zito, Phil. "What is Tridium Part 1". Archived from the original on June 29, 2016. Retrieved August 13, 2015.
- ↑ "Tridium NiagaraAX Directory Traversal Vulnerability". Cybersecurity and Infrastructure Security Agency. ICSA-13-045-01. Retrieved September 10, 2026.
- ↑ "Tridium Niagara Enterprise Security, Niagara AX, and Niagara 4". Cybersecurity and Infrastructure Security Agency. ICSA-18-333-02. Retrieved September 10, 2026.
- ↑ "Tridium Niagara". Cybersecurity and Infrastructure Security Agency. ICSA-20-224-03. Retrieved September 10, 2026.
- ↑ "Critical Vulnerabilities Found in Tridium Niagara Framework". Nozomi Networks. July 23, 2025. Retrieved September 10, 2026.
- 1 2 Lakshmanan, Ravie (July 28, 2025). "Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide". The Hacker News. Retrieved September 10, 2026.
External links
[edit] | This software company article is a stub. You can help Wikipedia by adding missing information. |