← Back

Comfortlink Ii Firmware

comfortlink_ii_firmware

Vendor: Trane • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-2868
1Trane
1Comfortlink Ii Firmware
May 6, 2026
Jan 6, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the DSS service on the Trane ComfortLink II device can send an o...Show more
An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the DSS service on the Trane ComfortLink II device can send an overly long REG request that can overflow a fixed size stack buffer, resulting in arbitrary code execution.Show less
CVE-2015-2867
1Trane
1Comfortlink Ii Firmware
May 6, 2026
Jan 6, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.