Skip to content
OpenAdvisories
Critical ICSA-21-266-02 1 CVE

Trane Tracer

Published Sep 23, 2021 · Updated Sep 23, 2021

Vendor: Trane Product: Tracer Concierge Product: Tracer SC

Summary

Successful exploitation of this vulnerability could allow an authenticated user to execute arbitrary code on the controller.

Vulnerabilities 1

  • Critical 9.9
    CVE-2021-38450

    Trane Tracer Code Injection

    The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.

    Trane Tracer SC Tracer Concierge

Revision history

  1. #1

    ICSA-21-266-02 Trane Tracer

References