CVE-2018-7276: An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices.

Security readout for executives and security teams

This CVE describes a Lutron Quantum BACnet Integration 2.0 device exposing potentially sensitive information through a web request. The example given is device latitude and longitude. Business urgency depends on whether affected building-control devices are reachable from untrusted networks. Exposure is most likely where Lutron Quantum BACnet Integration interfaces are network-reachable beyond trusted facilities or management networks. The bundle only names firmware 3.2.243, so broader version exposure is unconfirmed. Treat this as a targeted operational-technology exposure check, not an emergency without evidence of active exploitation. Prioritize internet-facing or poorly segmented building-control networks. Mitigation focus: Inventory Lutron Quantum BACnet Integration deployments and firmware versions.; Restrict device management interfaces to trusted facilities networks only.; Block internet access to building-control interfaces where possible..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.