What is CVE-2015-2868?

CVE-2015-2868 is a critical-severity vulnerability in Trane Comfortlink Ii Firmware, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2017-01-06.

How severe is CVE-2015-2868?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Trane Comfortlink Ii Firmware

CVE-2015-2868

An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS service. An attacker who can connect to the DSS service on the Trane ComfortLink II device can send an overly long REG request that can overflow a fixed size stack buffer, resulting in arbitrary code execution.

Vulnerability class: Buffer Overflow

EPSS: 0.068 (93.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Trane Comfortlink_ii_firmware — versions 2.0.2
Trane Comfortlink Ii Scc Firmware — versions 2.0.2

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cret@cert.org (vdb-entry, x_refsource_BID)
cret@cert.org (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2015-2868?: CVE-2015-2868 is a critical-severity vulnerability in Trane Comfortlink Ii Firmware, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2017-01-06.
How severe is CVE-2015-2868?: Critical severity. CVSS v3 base score is 9.8 out of 10.