Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2021-42534

Trane Building Automation Controllers Cross-site Scripting

Description

The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Trane Tracer SC

  • All to ≤ 3.8affected

References