Design/Logic Flaw

A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system...

CVE-2015-2867

CVE-2015-2867 affects Trane ComfortLink II SCC firmware 2.0.2. Talos reports a design flaw that, during boot, installs two hardcoded user credentials (root: Cold,,2100AAAAA and raptor21: Cold,,2100RRRRR) enabling remote SSH access and local root privilege escalation. The vulnerability allows remo...