Information disclosure

Lutron Quantum BACnet Integration 2.0 firmware 3.2.243 doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure...

CVE-2018-8880: Exposure of Sensitive Information to an Unauthorized Actor

Lutron Quantum BACnet Integration 2.0 firmware 3.2.243 doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure...

PT-2018-18686

Name of the Vulnerable Software and Affected Versions Lutron Quantum BACnet Integration version 2.0 firmware 3.2.243 Description The issue concerns a lack of proper user authentication, leading to the disclosure of internal network information. Specifically, the "/deviceIP" information is...

CVE-2018-7276: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Lutron Quantum BACnet Integration 2.0 firmware 3.2.243 devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the device...

PT-2018-17992

Name of the Vulnerable Software and Affected Versions Lutron Quantum BACnet Integration version 2.0 firmware 3.2.243 Description An issue allows remote attackers to obtain potentially sensitive information via a "/DbXmlInfo.xml" API endpoint request. This can reveal details such as the...