Skip to content

CVE-2018-8880 Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure.

HighCVSS 7.5 EPSS 13.3% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure.

Affected products

ProductAffected versionsFixed in
lutron quantum bacnet integration firmware = 3.2.243 No fix listed

References

  • sadfud.me exploit third-party-advisory
  • 44488 exploit third-party-advisory vdb-entry