CVE-2018-8880

Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure.

• CWE-200

• http://sadfud.me/explotos/deviceip.txtExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44488/Exploit, Third Party Advisory, VDB Entry
• http://sadfud.me/explotos/deviceip.txtExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44488/Exploit, Third Party Advisory, VDB Entry

Published

Apr 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-8874In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) …
• CVE-2018-8875In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) …
• CVE-2018-8876In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) …
• CVE-2018-8877Information disclosure in Asuswrt-Merlin firmware for ASUS d…5.3
• CVE-2018-8878Information disclosure in Asuswrt-Merlin firmware for ASUS d…5.3
• CVE-2018-8879Stack-based buffer overflow in Asuswrt-Merlin firmware for A…9.8
• CVE-2018-8881Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer …
• CVE-2018-8882Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer…
• CVE-2018-8883Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read i…
• CVE-2018-8885screenresolution-mechanism in screen-resolution-extra 0.17.2…
• CVE-2018-8888A stored cross-site scripting (XSS) vulnerability in the Man…
• CVE-2018-8889A directory traversal vulnerability in the Connect Service o…