Skip to content
Noroxi

lutron records

5 published records for vendor lutron.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2018-11629
    40Plan

    Default and unremovable support credentials (user:lutron password:integration) allow attackers to gain total super user control of an IoT de

    CriticalCVSS 9.8No exploitEPSS 4%

    lutron · stanza firmwareJun 2, 2018

  • CVE-2018-11681
    40Plan

    Default and unremovable support credentials (user:nwk password:nwk2) allow attackers to gain total super user control of an IoT device throu

    CriticalCVSS 9.8No exploitEPSS 4%

    lutron · stanza firmwareJun 2, 2018

  • CVE-2018-11682
    40Plan

    Default and unremovable support credentials allow attackers to gain total super user control of an IoT device through a TELNET session to pr

    CriticalCVSS 9.8No exploitEPSS 4%

    lutron · stanza firmwareJun 2, 2018

  • CVE-2018-8880
    34Monitor

    Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP informat

    HighCVSS 7.5Proof of conceptEPSS 13%

    lutron · quantum bacnet integration firmwareApr 23, 2018

  • CVE-2018-7276
    30Monitor

    An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices.

    HighCVSS 7.5No exploitEPSS 1%

    lutron · quantum bacnet integration firmwareFeb 20, 2018