Security Advisory
CVE-2023-4212
6.8
MEDIUM
Vulnerability Description
A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick.
Published Date
August 22, 2023
Official Source
NIST NVD Advisory