Read the docs

Trane

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Trane records in CISA KEV

No Trane vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tracer Sc Firmware 7 records MEDIUM Tracer Concierge 6 records MEDIUM Tracer Sc+ Firmware 6 records MEDIUM Comfortlink Ii Firmware 2 records MEDIUM Tracer Sc 2 records LOW Pivot Firmware 1 record LOW Symbio 700 1 record LOW Symbio 800 1 record LOW

Records

1 record in Pivot Firmware · all components

TI-2023-03899 CVE-2023-4212 · GHSA-866w-mhv5-886h

Trane Thermostats Injection

Priority LOW 35

​A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.01332 Published 2023-08-22 No fix listed CWE-74
Open these records in search →