CVE Catalog
CVE-2015-2867
CriticalSummary
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 allows remote attackers to take complete control of the system.
Risk Assessment
The organization may be exposed to unauthorized access and control over the system, potentially leading to serious operational consequences.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability.
Original NVD description (English source)
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.