Trane Tracer SC Sensitive Information Exposure Vulnerability
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2016-0870US | medium5.3 | — | ||
The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-16-259-03 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-16-259-03 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (1)
- MitigationTracer SC
Trane U.S. Inc. has produced an update for the Tracer SC. It is recommended that users contact their local Trane office for information on how to obtain this update. Please reference Trane service database number HUB-120517 when calling the local Trane office. If users need assistance locating their local Trane office, please click: (http://www.trane.com/commercial/north-america/us/en.html)
http://www.trane.com/commercial/north-america/us/en.html
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan