Vulnerabilities > Trane > Tracer SC
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2016-09-19 | CVE-2016-4526 | Uncontrolled Search Path Element vulnerability in Trane Tracer SC ABB DataManagerPro 1.x before 1.7.1 allows local users to gain privileges by replacing a DLL file in the package directory. | 6.9 |
| 2016-09-19 | CVE-2016-0870 | Information Exposure vulnerability in Trane Tracer SC The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request. | 5.0 |