Description (CNA)
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trane / Tracer SC | affected All before 4.4 SP7 |
| Trane / Tracer SC+ | affected All before 5.5 SP3 |
| Trane / Tracer Concierge | affected All before 5.5 SP3 |
CWE
CWE-94
References
ADP enrichment
No English description supplied.