Description
A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trane | Tracer SC | < v4.4 SP7 | v4.4 SP7 |
| Trane | Tracer SC+ | < v6.3.2310 | v6.3.2310 |
| Trane | Tracer Concierge | < v6.3.2310 | v6.3.2310 |
Advisories 1
- ICSA-26-071-01 Trane Tracer SC, Tracer SC+, and Tracer Concierge CISA ICS & IT advisories · Mar 12, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-01 government-resource