Lucene search

CVE-2018-11629

🗓️ 02 Jun 2018 13:00:29Reported by mitreType

CVE-2018-11629 Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the HomeWorks QS Lutron integration protocol Revision M to Revision Y

Reporter	Title	Published	Views	Family All 4
Prion	Design/Logic Flaw	2 Jun 201813:29	–	prion
NVD	CVE-2018-11629	2 Jun 201813:29	–	nvd
Cvelist	CVE-2018-11629	2 Jun 201813:00	–	cvelist
OpenVAS	Lutron Devices Default Credentials (Telnet)	5 Jun 201800:00	–	openvas

Nvd

Node

lutron stanza_firmwareMatch-

AND

lutron stanzaMatch-

Node

lutron radiora_2_firmwareMatch-

AND

lutron radiora_2Match-

Node

lutron homeworks_qs_firmwareMatch-

AND

lutron homeworks_qsMatch-

Source	Link
reversecodes	www.reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral/
sadfud	www.sadfud.me/explotos/CVE-2018-11629
lutron	www.lutron.com/TechnicalDocumentLibrary/040249.pdf

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Jun 2018 13:29Current

9.9High risk

Vulners AI Score9.9

CVSS210

CVSS39.8

EPSS0.02351

CWE-798