Lucene search
PRIOn knowledge basePRION:CVE-2023-4212HistoryAug 22, 2023 - 7:16 p.m.
Command injection
2023-08-2219:16:00
PRIOn knowledge base
www.prio-n.com
command injection
trane
thermostat
usb
vulnerability
?A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pivot_firmware | le | 1.8 | |
| xl1050_firmware | le | 5.9.8 | |
| xl824_firmware | le | 5.9.8 | |
| xl850_firmware | le | 5.9.8 |
Related
ics
ics
Trane Thermostats
2023-08-22 12:00:00
cve
cve
CVE-2023-4212
2023-08-22 19:16:41
cvelist
cvelist
CVE-2023-4212 Trane Thermostats Injection
2023-08-22 17:34:12
nvd
nvd
CVE-2023-4212
2023-08-22 19:16:41