**漏洞简介**
HomeWorks QS Lutron integration protocol是一款集成协议,它允许第三方设备(如触摸屏、遥控器和其它已供应程序)控制和监视Lutron照明系统。
HomeWorks QS Lutron integration protocol M修订版本至Y修订版中存在安全漏洞,该漏洞源于用户无法禁用使用该协议的产品中默认的硬编码凭证 (user:lutron password:integration)。攻击者可借助TELNET会话利用该漏洞控制设备。
**受影响产品**
- GRAFIK Eye® QS
- seeTouch® Keypad
- Tabletop seeTouch® Keypad
- ArchitraveTM Keypad
- Signature SeriesTM Keypad
- Sivoia® QS Shade
- Maestro® Dimmer + Switch
- Maestro® Fan Speed Control
- Visor Control Receiver
- Hybrid Keypad
- Pico® Wireless Control
- Radio Powr SavrTM Sensor
- HVAC Controller
- Remote Power Module
- Energi Savr NodeTM QS/
- EcoSystem® (Int’l)
- Energi Savr NodeTM QS/
- Motor Module (Int’l)
- Wallbox Input Closure Interface
- Wireless Temperature Sensor
- Energi Savr NodeTM QS/
- Phase Adaptive (Int’l)
- QS Input/Output Interface
- QS Sensor Module
暂无评论