Trane kayıtları
trane üreticisine ait 13 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-798 Use of Hard-coded Credentials2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm1
- CWE-427 Uncontrolled Search Path Element1
- CWE-547 Use of Hard-coded, Security-relevant Constants1
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
13 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2015-2868İstismar yok | An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service.trane · comfortlink ii firmware · CWE-119 | Kritik9,8 | — | %6,8 | 6 Oca 2017 |
40Planlayın | CVE-2015-2867İstismar yok | A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.trane · comfortlink ii firmware · CWE-798 | Kritik9,8 | — | %4,9 | 6 Oca 2017 |
36İzleyin | CVE-2026-28252İstismar yok | Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Conciergetrane · tracer sc firmware · CWE-327 | Kritik9,2 | — | %0,3 | 12 Mar 2026 |
35İzleyin | CVE-2021-38450İstismar yok | Trane Tracer Code Injectiontrane · tracer concierge · CWE-94 | Yüksek8,8 | — | %1,0 | 26 Eki 2021 |
34İzleyin | CVE-2026-28253İstismar yok | Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Conciergetrane · tracer sc firmware · CWE-789 | Yüksek8,7 | — | %0,5 | 12 Mar 2026 |
32İzleyin | CVE-2026-28255İstismar yok | Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Conciergetrane · tracer sc firmware · CWE-798 | Yüksek8,2 | — | %0,5 | 12 Mar 2026 |
30İzleyin | CVE-2016-4526İstismar yok | ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.trane · tracer sc · CWE-427 | Yüksek7,5 | — | %0,3 | 18 Eyl 2016 |
30İzleyin | CVE-2021-38448İstismar yok | Trane Symbio Improper Control of Generation of Codetrane · symbio 700 · CWE-94 | Yüksek7,6 | — | %0,3 | 22 Kas 2021 |
27İzleyin | CVE-2023-4212İstismar yok | Trane Thermostats Injectiontrane · xl824 firmware · CWE-74 | Orta6,8 | — | %1,3 | 22 Ağu 2023 |
27İzleyin | CVE-2026-28256İstismar yok | Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Conciergetrane · tracer sc\+ firmware · CWE-547 | Orta6,9 | — | %0,4 | 12 Mar 2026 |
27İzleyin | CVE-2026-28254İstismar yok | Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Conciergetrane · tracer sc firmware · CWE-862 | Orta6,9 | — | %0,4 | 12 Mar 2026 |
24İzleyin | CVE-2021-42534İstismar yok | Trane Building Automation Controllers Cross-site Scriptingtrane · tracer sc firmware · CWE-79 | Orta6,1 | — | %0,6 | 22 Eki 2021 |
21İzleyin | CVE-2016-0870İstismar yok | The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.trane · tracer sc · CWE-200 | Orta5,3 | — | %1,2 | 18 Eyl 2016 |
- CVE-2015-286841Planlayın
An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service.
KritikCVSS 9,8İstismar yokEPSS %7trane · comfortlink ii firmware6 Oca 2017
- CVE-2015-286740Planlayın
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.
KritikCVSS 9,8İstismar yokEPSS %5trane · comfortlink ii firmware6 Oca 2017
- CVE-2026-2825236İzleyin
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
KritikCVSS 9,2İstismar yokEPSS %0trane · tracer sc firmware12 Mar 2026
- CVE-2021-3845035İzleyin
Trane Tracer Code Injection
YüksekCVSS 8,8İstismar yokEPSS %1trane · tracer concierge26 Eki 2021
- CVE-2026-2825334İzleyin
Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
YüksekCVSS 8,7İstismar yokEPSS %0trane · tracer sc firmware12 Mar 2026
- CVE-2026-2825532İzleyin
Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
YüksekCVSS 8,2İstismar yokEPSS %0trane · tracer sc firmware12 Mar 2026
- CVE-2016-452630İzleyin
ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.
YüksekCVSS 7,5İstismar yokEPSS %0trane · tracer sc18 Eyl 2016
- CVE-2021-3844830İzleyin
Trane Symbio Improper Control of Generation of Code
YüksekCVSS 7,6İstismar yokEPSS %0trane · symbio 70022 Kas 2021
- CVE-2023-421227İzleyin
Trane Thermostats Injection
OrtaCVSS 6,8İstismar yokEPSS %1trane · xl824 firmware22 Ağu 2023
- CVE-2026-2825627İzleyin
Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
OrtaCVSS 6,9İstismar yokEPSS %0trane · tracer sc\+ firmware12 Mar 2026
- CVE-2026-2825427İzleyin
Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
OrtaCVSS 6,9İstismar yokEPSS %0trane · tracer sc firmware12 Mar 2026
- CVE-2021-4253424İzleyin
Trane Building Automation Controllers Cross-site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1trane · tracer sc firmware22 Eki 2021
- CVE-2016-087021İzleyin
The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.
OrtaCVSS 5,3İstismar yokEPSS %1trane · tracer sc18 Eyl 2016