Trane vulnerabilities
We track 5 vulnerabilities in Trane products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on March 12, 2026.
Latest Trane vulnerabilities
- 9.8 Critical severity
Tracer SC: Use of Hard-coded, Security-relevant Constants
A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
- 9.8 Critical severity
Tracer SC: Use of Hard-coded Credentials
A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.
- 7.5 High severity
Tracer SC: Missing Authorization
A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotected APIs.
- 7.5 High severity
Tracer SC: Memory Allocation with Excessive Size Value
A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-service condition
- 9.8 Critical severity
Tracer SC: Use of a Broken or Risky Cryptographic Algorithm
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.