Today CISA’s NCCIC-ICS published two control system security advisories for products from Trane. They also updated an advisory for products from Ovarro.
Tracer Advisory
This advisory describes a code injection vulnerability in the Trane Tracer building automation controllers. The vulnerability is self-reported. Trane has updated firmware that mitigates th…