Read the docs

Trane

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Trane records in CISA KEV

No Trane vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tracer Sc Firmware 7 records MEDIUM Tracer Concierge 6 records MEDIUM Tracer Sc+ Firmware 6 records MEDIUM Comfortlink Ii Firmware 2 records MEDIUM Tracer Sc 2 records LOW Pivot Firmware 1 record LOW Symbio 700 1 record LOW Symbio 800 1 record LOW

Records

2 records in Comfortlink Ii Firmware · all components

TI-2015-02532 CVE-2015-2868 · GHSA-rggx-gpg5-f3h9

Memory corruption in Trane ComfortLink II SCC firmware

Priority MEDIUM 52

An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06972 Published 2017-01-06 No fix listed CWE-119
TI-2015-02531 CVE-2015-2867 · GHSA-x52m-rpmj-3vrc

Hard-coded credentials in Trane ComfortLink II SCC firmware

Priority MEDIUM 50

A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0496 Published 2017-01-06 No fix listed CWE-798
Open these records in search →