CVE-2024-1309 is a medium severity uncontrolled resource consumption flaw in Honeywell Niagara Framework on Windows, Linux and QNX, scored 6.5. The record lists versions before Niagara AX 3.8.1 and before Niagara 4.1. Check Honeywell's product security page for the exact fix and upgrade.
What's affected
The record says Niagara Framework before Niagara AX 3.8.1 and before Niagara 4.1, on Windows, Linux and QNX. The vector shows network access, no privileges, and limited integrity and availability impact, for a score of 6.5.
The wording is unusual. The record lists the weakness as uncontrolled resource consumption but says the flaw allows content spoofing. I could not find a vendor description that explains the link between the two.
The record references Honeywell's process site and product security page, and a CERT Coordination Center note. I fetched the CERT note, and it did not mention Niagara. It is a multi vendor note about a UDP based flaw, so it does not confirm affected versions here. Check Honeywell directly.
Weakness class: CWE-400. The NVD record carries the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L and a score of 6.5.
How to check if you're exposed
Niagara stations show their version in the Niagara Workbench or the station's about information. Compare it with the ranges above.
Because this is an exposed network service, also map where your Niagara stations accept connections. Check firewall rules for building or plant networks and make sure only management hosts reach them.
Safeguard has a free in-browser dependency scan at gold.safeguard.sh/scan for the libraries in your own projects, and reachability analysis helps you tell which findings your code actually calls.
What to do now
- List every Niagara station and its version.
- Check Honeywell's product security page for the advisory on CVE-2024-1309 and the fixed builds.
- Upgrade stations that are below Niagara AX 3.8.1 or below Niagara 4.1, as far as your support contract allows.
- Restrict network access to stations to the hosts that need it.
- Plan to retire AX era installations, since that product line is old.
Why it matters
Uncontrolled resource consumption (CWE-400) means a service can be pushed into using more CPU, memory or bandwidth than it should. The usual result is slowdown or failure. The record also mentions limited integrity impact through spoofed content.
Building automation systems are meant to run unattended for years, so patching them is a project and not a click. The record's KEV flag is false and I found no source reporting exploitation. A medium score does not mean low value, since the same stations control physical systems.
Quick check
Where do I find the exact fixed version?
On Honeywell's product security page. The record gives only the ranges before AX 3.8.1 and before 4.1.
Did the CERT note confirm the details?
No. The note I fetched did not mention Niagara, so I used it only as background.
Sources
- NVD record for CVE-2024-1309
- CERT Coordination Center note VU 417980 (fetched, does not mention Niagara)
- Honeywell product security page cited in the record (not retrieved)
Last reviewed: 19 October 2026.
