Trane vulnerabilities

CVEs per yearBy the year they were published

1. 20172
2. 20213
3. 20265

Newest CVEs

• CVE-2026-28256

  Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

  Trane · Tracer SC

  Medium6.9
• CVE-2026-28255

  Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

  Trane · Tracer SC

  High8.2
• CVE-2026-28254

  Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

  Trane · Tracer SC

  Medium6.9
• CVE-2026-28253

  Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

  Trane · Tracer SC

  High8.7
• CVE-2026-28252

  Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

  Trane · Tracer SC

  Critical9.2
• CVE-2021-38448

  Trane Symbio Improper Control of Generation of Code

  Trane · Symbio

  High7.5
• CVE-2021-38450

  Trane Tracer Code Injection

  Trane · Tracer SC

  Critical9.9
• CVE-2021-42534

  Trane Building Automation Controllers Cross-site Scripting

  Trane · Tracer SC

  Medium6.3
• CVE-2015-2868

  An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the…

  Trane · ComfortLink II SCC firmware

  Critical9.8
• CVE-2015-2867

  A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.

  Trane · ComfortLink II SCC firmware

  Critical9.8