Lucene search
K

4 matches found

CNNVD
CNNVD
added 2026/03/12 12:0 a.m.2 views

Trane多款产品 加密问题漏洞

Trane Tracer SC, among others, are products of the American company Trane. Trane Tracer SC is a building controller for monitoring and automation management. Trane Tracer SC+ is also a building controller for monitoring and automation management. Trane Tracer Concierge is a building management...

9.8CVSS5.8AI score0.0004EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/08/03 12:0 a.m.1 views

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) in Andover Continuum arises from the lack of measures to protect input data. This allows intruders to perform cross-site scripting attacks (XSS).

The vulnerability of the building management software management of access control, security systems, video surveillance, and automation in Andover Continuum is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a remote attacker to perform cross-si...

6.1CVSS6.1AI score0.00301EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/30 12:0 a.m.3 views

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the possibility of interference with XML data processing by the application, allows a intruder to gain access to the files in the application server’s file system.

The vulnerability of the building management software management of access control, security systems, video surveillance, and automation Andover Continuum System is related to the possibility of interference with XML data processing by the application. Exploiting this vulnerability can allow a...

10CVSS7.8AI score0.00571EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/30 12:0 a.m.2 views

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) Andover Continuum System, related to the lack of protection for website structures, allows attackers to execute cross-site scripting attacks (XSS attacks) during the use of web server applications.

The vulnerability of the building management software managing access control, security systems, video surveillance, and automation in Andover Continuum System is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to...

6.1CVSS6.4AI score0.00317EPSS
Exploits0References3
Rows per page
Query Builder