medium6.1
CVE-2018-7277
An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices.
Impact
An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rletech | Wi-Mgr Firmware | Version 6.2 |
| Rletech | Fds-Wi Firmware | Version 6.2 |