Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-38448

Trane Symbio Improper Control of Generation of Code

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trane Symbio

  • 700 to < 1.00.0023affected
  • 800 to < 1.00.0007affected

References