Trane HVAC Systems Controls
The affected product 's web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.CVE-2021-42534 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L).