The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.
5.3CVSS
5.1AI Score
0.002EPSS
ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.
7.5CVSS
7.5AI Score
0.0004EPSS