2 Advisories and 1 Update Published – 9-23-21

Today CISA’s NCCIC-ICS published two control system security advisories for products from Trane. They also updated an advisory for products from Ovarro.

Tracer Advisory

This advisory describes a code injection vulnerability in the Trane Tracer building automation controllers. The vulnerability is self-reported. Trane has updated firmware that mitigates th…