CVE-2015-2867

CVE-2015-2867: vulnerability in Trane ComfortLink II SCC firmware

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.0%
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.
Related CVEs — Trane ComfortLink II SCC firmware

In the same product, most dangerous first.