Trane Tracer SC Sensitive Information Exposure Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-0870US | medium5.3 | — | ||
The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-16-259-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-16-259-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (1)
- MitigationTracer SC
Trane U.S. Inc. has produced an update for the Tracer SC. It is recommended that users contact their local Trane office for information on how to obtain this update. Please reference Trane service database number HUB-120517 when calling the local Trane office. If users need assistance locating their local Trane office, please click: (http://www.trane.com/commercial/north-america/us/en.html)
http://www.trane.com/commercial/north-america/us/en.html
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan