← Back

Xl850 Firmware

xl850_firmware

Vendor: Trane • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-4212
1Trane
4Pivot Firmware
Xl1050 FirmwareXl824 Firmware+1 more
Jun 17, 2026
Aug 22, 2023
N/A· v4
6.8 MEDIUM· v3
N/A· v2
​A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires ph...Show more
​A command injection vulnerability exists in Trane XL824, XL850, XL1050, and Pivot thermostats allowing an attacker to execute arbitrary commands as root using a specially crafted filename. The vulnerability requires physical access to the device via a USB stick. Show less