Lucene search
CertccCVELIST:CVE-2015-2868HistoryJan 06, 2017 - 9:00 p.m.
CVE-2015-2868
2017-01-0621:00:00
certcc
www.cve.org
3
EPSS
0.02
Percentile
89.1%
An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the DSS service on the Trane ComfortLink II device can send an overly long REG request that can overflow a fixed size stack buffer, resulting in arbitrary code execution.
CNA Affected
[
{
"product": "ComfortLink II SCC firmware",
"vendor": "Trane",
"versions": [
{
"status": "affected",
"version": "2.0.2"
}
]
}
]Related
cve
cve
CVE-2015-2868
2017-01-06 21:59:00
nvd
nvd
CVE-2015-2868
2017-01-06 21:59:00
talos
talos
checkpoint_advisories
checkpoint_advisories
prion
prion
Remote code execution
2017-01-06 21:59:00