CRITICAL🇬🇧 English

CVE-2021-38450

CVSS 9.9v3.1pub. 2021-10-27upd. 2024-11-21

The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

  • Trane Tracer Concierge

    APP
    Trane
    5.5< 5.5

  • Trane Tracer Sc

    HW
    Trane
    wszystkie wersje

  • Trane Tracer Sc\+

    HW
    Trane
    wszystkie wersje

  • Trane Tracer Sc Firmware

    OS
    Trane
    4.4< 4.4

  • Trane Tracer Sc\+ Firmware

    OS
    Trane
    5.5< 5.5
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2026-28252CRITICAL9.2PL ✓ten sam produkt

Podatność kryptograficzna w Trane Tracer SC umożliwiająca pominięcie uwierzytelnienia

CVE-2026-28253HIGH8.7ten sam produkt

A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concier...

CVE-2026-28255HIGH8.2ten sam produkt

A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow...

CVE-2016-4526HIGH7.5ten sam produkt

ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the packa...

CVE-2026-28256MEDIUM6.9ten sam produkt

A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Conc...