CVE-2018-8880: Lutron Quantum Bacnet Integration Firmware

High severity, CVSS 7.5. EPSS: 13.3% chance of exploitation in the next 30 days.

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure.

Affected products

• Lutron Quantum Bacnet Integration Firmware: version 3.2.243 only

Published 2018-04-23. Last modified 2026-06-17.