Description
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trane | Tracer SC | < v4.4 SP7 | v4.4 SP7 |
| Trane | Tracer SC+ | < v6.3.2310 | v6.3.2310 |
| Trane | Tracer Concierge | < v6.3.2310 | v6.3.2310 |
Advisories 1
- ICSA-26-071-01 Trane Tracer SC, Tracer SC+, and Tracer Concierge CISA ICS & IT advisories · Mar 12, 2026
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-01 government-resource