This advisory contains mitigations for a Cross-site Scripting vulnerability in Trane Tracer SC HVAC building automation products.
https://us-cert.cisa.gov/ics/advisories/icsa-21-292-02