ГлавнаяУязвимости → CVE-2026-28252
9.8критическая

CVE-2026-28252

Описание

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.

Затрагиваемое ПО
Trane Tracer sc firmwareTrane Tracer scTrane Tracer sc\+ firmwareTrane Tracer sc\+Trane Tracer concierge
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-01