Trane vulnerabilities
10 published CVEs name Trane among the affected products.
- 10Published CVEs10 of them scored
- 5Last 12 monthspublished in the last year
- 4Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-28256
Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
Trane · Tracer SC
Medium6.9 - CVE-2026-28255
Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
Trane · Tracer SC
High8.2 - CVE-2026-28254
Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
Trane · Tracer SC
Medium6.9 - CVE-2026-28253
Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
Trane · Tracer SC
High8.7 - CVE-2026-28252
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge
Trane · Tracer SC
Critical9.2 - CVE-2021-38448
Trane Symbio Improper Control of Generation of Code
Trane · Symbio
High7.5 - CVE-2021-38450
Trane Tracer Code Injection
Trane · Tracer SC
Critical9.9 - CVE-2021-42534
Trane Building Automation Controllers Cross-site Scripting
Trane · Tracer SC
Medium6.3 - CVE-2015-2868
An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the…
Trane · ComfortLink II SCC firmware
Critical9.8 - CVE-2015-2867
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.
Trane · ComfortLink II SCC firmware
Critical9.8