What’s Vulnerable › Vulnerabilities

CVE-2018-7276

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-02-21 · updated 2026-06-17
• Weakness: CWE-200

Description

An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtain potentially sensitive information via a /DbXmlInfo.xml request, as demonstrated by the Latitude/Longitude of the device.

Affected products

• Lutron Quantum Bacnet Integration Firmware: 3.2.243

References

• http://misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.html
• http://misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.html

Get alerted when CVE-2018-7276 or the next vulnerability affects your stack