Trane Tracer Sc — known CVE vulnerabilities

Every CVE whose affected-product data names Trane Tracer Sc, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2016-4526 — CVSS 7.5 (high): ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory.
• CVE-2016-0870 — CVSS 5.3 (medium): The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.