Lucene search

K

Lutron Security Vulnerabilities

cve
cve

CVE-2018-11682

Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a vulnerability because what can.....

9.8CVSS

9.9AI Score

0.005EPSS

2018-06-02 01:29 PM
23
cve
cve

CVE-2018-11681

Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the RadioRA 2 Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as not being a...

9.8CVSS

9.8AI Score

0.005EPSS

2018-06-02 01:29 PM
22
cve
cve

CVE-2018-11629

Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user control of an IoT device through a TELNET session to products using the HomeWorks QS Lutron integration protocol Revision M to Revision Y. NOTE: The vendor disputes this id as...

9.8CVSS

9.9AI Score

0.005EPSS

2018-06-02 01:29 PM
25
cve
cve

CVE-2018-7276

An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the...

7.5CVSS

7.4AI Score

0.003EPSS

2022-10-03 04:21 PM
26
cve
cve

CVE-2018-8880

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information...

7.5CVSS

7.3AI Score

0.04EPSS

2018-04-23 06:29 PM
36