CVEs-PoC/2018/CVE-2018-8880.md

CVE-2018-8880

Description

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure.

POC

Reference

• https://www.exploit-db.com/exploits/44488/

Github

• https://github.com/SadFud/Exploits