Vulnerabilities > Trane > Pivot Firmware

DATE CVE VULNERABILITY TITLE RISK
2023-08-22 CVE-2023-4212 Command Injection vulnerability in Trane products
?A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename.
low complexity
trane CWE-77
6.8