Vulnerabilities (CVE)

Filtered by vendor Trane Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-38448 1 Trane 6 Ascend Air-cooled Chiller Acr, Intellipak 1, Intellipak 2 and 3 more 2022-05-10 4.6 MEDIUM 7.6 HIGH
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.
CVE-2021-38450 1 Trane 5 Tracer Concierge, Tracer Sc, Tracer Sc\+ and 2 more 2021-10-29 6.5 MEDIUM 8.8 HIGH
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.
CVE-2016-4526 1 Trane 1 Tracer Sc 2016-11-28 6.9 MEDIUM 7.5 HIGH
ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.