CVE-2018-7276 An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the device.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lutron quantum bacnet integration firmware | = 3.2.243 | No fix listed |
References
- misteralfa-hack.blogspot.com exploit third-party-advisory