High severity7.5NVD Advisory· Published Nov 22, 2021· Updated Jun 17, 2026
CVE-2021-38448
CVE-2021-38448
Description
The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:trane:symbio_700:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:trane:symbio_700:*:*:*:*:*:*:*:*range: <1.00.0023
- (no CPE)range: 700
Patches
Vulnerability mechanics
References
1- us-cert.cisa.gov/ics/advisories/icsa-21-266-01nvdMitigationThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.