Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

lutron CVEs

Beta · best-effort

5 CVEs tagged to vendor lutron — 3 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2018-11682

Published Jun 2, 2018

Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to products using the Stanza Lutron integrat…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-11681

Published Jun 2, 2018

Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device through a TELNET session to products using t…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-11629

Published Jun 2, 2018

Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user control of an IoT device through a TELNET session to produc…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-8880

Published Apr 23, 2018

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network in…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2018-7276

Published Feb 21, 2018

An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml req…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1