Command Injection in Trane Thermostats
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2023-4212 |
| CWE-ID | CWE-77 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
XL824 Thermostat Hardware solutions / Other hardware appliances XL850 Thermostat Hardware solutions / Other hardware appliances XL1050 Thermostat Hardware solutions / Other hardware appliances Pivot Thermostat Hardware solutions / Other hardware appliances |
| Vendor | Trane |
Security Bulletin
This security bulletin contains one low risk vulnerability.
1) Command Injection
EUVDB-ID: #VU80014
Risk: Low
CVSSv3.1: 5.9 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-4212
CWE-ID:
CWE-77 - Command injection
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to execute arbitrary commands on the target system.
The vulnerability exists due to improper input validation. An attacker with physical access can use a specially crafted filename and execute arbitrary commands on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsXL824 Thermostat: 5.9.8
XL850 Thermostat: 5.9.8
XL1050 Thermostat: 5.9.8
Pivot Thermostat: 1.8
External linkshttp://
http://www.cisa.gov/news-events/ics-advisories/icsa-23-234-02
http://hub.tranetechnologies.com/docs/DOC-216377
http://www.trane.com/commercial/north-america/us/en/contact-us/locate-sales-offices.html
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
