CVE-2015-2867
published 2017-01-06CVE-2015-2867: A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.
PriorityP356critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
4.87%
90.9th percentile
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| trane | comfortlink_ii_firmware | — | — |
| trane | comfortlink_ii_scc_firmware | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Talos
The Internet of Things Is Not Always So Comforting
blogs_talos·2016-02-08
The Internet of Things Is Not Always So Comforting
This post is authored by Alex Chiu.
Over the past few years, the Internet of Things (IoT) has emerged as reality with the advent of smart refrigerators, smart HVAC systems, smart TVs, and more. Embedding internet-enabled devices into everything presents new opportunities in connecting these systems to each other, making them "smarter," and making our lives more convenient than ever before.
Despite the new possibilities, there are major concerns about the IoT which inspire a legitimate question: "What happens if it's not 'done right' and there are major vulnerabilities with the product?"
The unfortunate truth is that securing internet-enabled devices is not always a high priority among vendors and manufacturers. Some manufactures do not have the necessary infrastructure to inform the pub
Talos
The Internet of Things Is Not Always So Comforting
blogs_talos·2016-02-08
The Internet of Things Is Not Always So Comforting
## The Internet of Things Is Not Always So Comforting
This post is authored by Alex Chiu .
Over the past few years, the Internet of Things (IoT) has emerged as reality with the advent of smart refrigerators, smart HVAC systems, smart TVs, and more. Embedding internet-enabled devices into everything presents new opportunities in connecting these systems to each other, making them "smarter," and making our lives more convenient than ever before.
Despite the new possibilities, there are major concerns about the IoT which inspire a legitimate question: " What happens if it's not 'done right' and there are major vulnerabilities with the product? "
The unfortunate truth is that securing internet-enabled devices is not always a high priority among vendors and manufacturers. Some manufactures
2017-01-06
Published