Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2016-0870
The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.004
EPSS Ranking
61.2%
CVSS Severity
CVSS v3 Score
5.3
CVSS v2 Score
5.0
References
http://www.securityfocus.com/bid/92979
https://ics-cert.us-cert.gov/advisories/ICSA-16-259-03
http://www.securityfocus.com/bid/92979
https://ics-cert.us-cert.gov/advisories/ICSA-16-259-03
Products affected by CVE-2016-0870
Trane
»
Tracer Sc
»
Version:
3.8
cpe:2.3:a:trane:tracer_sc:3.8
Trane
»
Tracer Sc
»
Version:
4.2.1134
cpe:2.3:a:trane:tracer_sc:4.2.1134
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved