Approved changes feed: RSS · Atom

cpe:2.3:o:lutron:quantum_bacnet_integration_firmware:3.2.243:*:*:*:*:*:*:*

part: o version: 3.2.243 update: *

VendorLutron (a8b22abf-be36-5d37-b592-4e308f5b4c71)
ProductQuantum Bacnet Integration Firmware (bba496e7-0757-5f38-a64c-2dfb988d5d63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8880 vulnerable 2026-06-08 05:12:06.637649 Details available
Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure.
Published: 2018-04-23T18:00:00.000Z
Updated: 2024-08-05T07:10:46.957Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7276 vulnerable 2026-06-08 05:12:03.548117 Details available
An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the device.
Published: 2018-02-21T01:00:00.000Z
Updated: 2024-09-16T18:34:47.051Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.