high7.5
CVE-2018-7276
An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices.
Impact
An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lutron | Quantum Bacnet Integration Firmware | Version 3.2.243 |