Trane Tracer Products Memory Allocation Vulnerability Leading to Denial-of-Service

A vulnerability allowing denial-of-service conditions has been identified in Trane Tracer SC, Tracer SC+, and Tracer Concierge. This issue arises from a memory allocation flaw that permits excessive size values, potentially leading to resource exhaustion. The vulnerability can be exploited by an unauthenticated attacker.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting the normal functioning of the affected product.