HarborGuard / CVE
Back to search
CRITICALCVE-2026-28252Published Modified CNA icscert

CVE-2026-28252: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.

Metrics

CVSS v4.0
9.2
Severity
CRITICAL
Fixed in
v4.4 SP7
Affected Products
3

Fix available

v4.4 SP7v6.3.2310
Affected packages
  • Trane / Tracer SC
    < v4.4 SP7 (from 0)
  • Trane / Tracer SC+
    < v6.3.2310 (from 0)
  • Trane / Tracer Concierge
    < v6.3.2310 (from 0)
CVSS Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References