CRITICAL🇵🇱 Wersja polska

CVE-2026-28252

CVSS 9.2v4.0pub. 2026-03-12upd. 2026-03-27

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain root-level access to the device.

🇵🇱 Read Polish description →

🤖 AI Analysis

How it works

The vulnerability results from the use of a weak or broken cryptographic algorithm in the device authentication process. An attacker can exploit weaknesses in this algorithm to effectively bypass identity verification without knowledge of valid credentials. As a result, unauthorized access with root privileges directly to the device's operating system is possible.

Impact

An attacker can gain full root-level access to the device, enabling control over the system, modification of its configuration, disruption of HVAC installation operations, or use of the device as an entry point for further OT/BMS network penetration.

Mitigation & patch

Patches available from the manufacturer should be applied in accordance with the references (https://www.cisa.gov/news-events/ics-advisories/icsa-26-071-01). Additionally, it is recommended to isolate Trane Tracer devices from public networks, implement network segmentation, and monitor access to device management interfaces.

Who is affected

Trane Tracer SC, Trane Tracer SC+, and Trane Tracer Concierge — versions specified in manufacturer references (ICS advisory ICSA-26-071-01).

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.

CVSS Vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X