CVE-2021-42534: Trane Tracer Sc Firmware

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.

Affected products

• Trane Tracer Sc Firmware: up to and including 3.8

Published 2021-10-22. Last modified 2026-06-17.