Description
The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trane | Tracer SC | All – ≤ 3.8 | — |
Advisories 1
- ICSA-21-292-02 Trane HVAC Systems Controls CISA ICS & IT advisories · Oct 19, 2021