Skip to content
OpenAdvisories

Vendor

Trane

10 known vulnerabilities.

Products

Tracer SC 7 Tracer Concierge 6 ComfortLink II SCC firmware 2 Symbio 1 Technologies XL824 Thermostat 0 Technologies XL850 Thermostat 0 Technologies XL1050 Thermostat 0 Technologies Pivot Thermostat 0 Odyssey Split Systems 0 Ascend Air-Cooled Chiller Model ACR 0 Agility Water-Cooled Chiller Model HDWA 0 IntelliPak Rooftop Air Conditioner 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-28255

    Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

    A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.

    Trane Tracer SC Tracer Concierge
  • High 8.7
    CVE-2026-28253

    Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

    A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition

    Trane Tracer SC Tracer Concierge
  • High 7.5
    CVE-2021-38448

    Trane Symbio Improper Control of Generation of Code

    The affected controllers do not properly sanitize the input containing code syntax. As a result, an attacker could craft code to alter the intended controller flow of the software.

    Trane Symbio