Skip to content
OpenAdvisories
High ICSA-21-266-01 1 CVE

Trane Symbio (Update B)

Published Sep 23, 2021 · Updated Jan 13, 2022 · Revision 3

Vendor: Trane Product: Agility Water-Cooled Chiller Model HDWA Product: Ascend Air-Cooled Chiller Model ACR Product: IntelliPak Rooftop Air Conditioner Product: Odyssey Split Systems

Summary

Successful exploitation of this vulnerability could allow a user to execute arbitrary code on the controller.

Vulnerabilities 1

  • High 7.5
    CVE-2021-38448

    Trane Symbio Improper Control of Generation of Code

    The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.

    Trane Symbio

Revision history

  1. #3

    ICSA-21-266-01 Trane Symbio (Update B)

  2. #2

    ICSA-21-266-01 Trane Symbio (Update A)

  3. #1

    ICSA-21-266-01 Trane Symbio

References