UPDATE: I downloaded the A/S update to an SD card and performed the upgrade. If in doubt, call your dealer and make them resolve it for you. There is v4.0.3 for the American standard here (mine has v3.0): There is a page with a v4.0.3 software update for the Trane device here: He hadn't received a bulletin from the company about the issue either. Then I alerted my dealer, who is a pretty sharp cookie. The point being that they know I have this product and they have my email address so they could contact me with a heads up.įirst thing I did was disable the Wi-Fi on the device until I can determine if it is affected and how to get the software update.
Nexia is owned by Ingersol Rand, the company that owns Trane and American Standard. Nexia is an online home automation site, so I can manage my heat pump system from anywhere in the world. I have checked my device several times since owning it and it always reports there are no updates available. The device has the ability to check for updates and download/install them. I've had the American Standard model since November 2014. According to Cisco, Trane patched the other two bugs part of a standard update released back in May 2015, but apparently without providing customers any indication that the update was critical to their protection efforts." Krebs says: "On January 26, 2016, Trane patched the more serious of the flaws (the hardcoded credentials). Krebs says: "In April 2014, researchers at Cisco alerted HVAC vendor Trane about three separate critical vulnerabilities in their ComfortLink II line of Internet-connected thermostats." So, How has Trane responded to this security flaw?
0 kommentar(er)
