A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote malicious users to take complete control of the system.
trane comfortlink ii firmware 2.0.2