Skip to content
OpenAdvisories

Vendor

Trane

11 known vulnerabilities.

Products

Tracer SC 7 Tracer Concierge 6 ComfortLink II SCC firmware 2 Symbio 1 XL824 Thermostat 1 XL850 Thermostat 1 XL1050 Thermostat 1 Pivot Thermostat 1 Technologies XL824 Thermostat 0 Technologies XL850 Thermostat 0 Technologies XL1050 Thermostat 0 Technologies Pivot Thermostat 0 Odyssey Split Systems 0 Ascend Air-Cooled Chiller Model ACR 0 Agility Water-Cooled Chiller Model HDWA 0 IntelliPak Rooftop Air Conditioner 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-28252

    Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

    A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.

    Trane Tracer SC Tracer Concierge
  • Critical 9.9
    CVE-2021-38450

    Trane Tracer Code Injection

    The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.

    Trane Tracer SC Tracer Concierge