CVE-2015-2867: Trane Comfortlink Ii Firmware

Critical severity, CVSS 9.8. EPSS: 5% chance of exploitation in the next 30 days.

A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete control of the system.

Affected products

Published 2017-01-06. Last modified 2026-06-17.