PT-2018-10746 · Lutron · Lutron Radiora 2

Published 2018-06-02 · Updated 2024-08-05 · CVE-2018-11681

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lutron RadioRA 2 versions Revision M through Revision Y

Description The issue allows attackers to gain total super user control of an IoT device through a TELNET session. Default and unremovable support credentials are used, with the username nwk and password nwk2. The vendor disputes this as a vulnerability, stating that the accessible commands are limited to controlling lighting and do not allow arbitrary code execution or admin-level control of a machine.

Recommendations For versions Revision M through Revision Y, consider disabling the TELNET session as a temporary workaround to minimize the risk of exploitation. Restrict access to the default support credentials to prevent unauthorized control of the IoT device.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2018-11681

Affected Products

Lutron Radiora 2

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-11681 · Security Note
• https://reversecodes.wordpress.com/2018/06/02/0-day-tomando-el-control-de-las-instalaciones-de-la-nasa-en-cabo-canaveral · Note
• http://lutron.com/TechnicalDocumentLibrary/040249.pdf · Note
• http://sadfud.me/explotos/CVE-2018-11629 · Note
• https://t.me/cvenotify/89134 · Telegram Post