Medium severity6.1NVD Advisory· Published Feb 21, 2018· Updated Jun 17, 2026

CVE-2018-7278

Description

An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP.

Affected products

Rle/FDS-PC / FDS-PC-DPllm-create
Range: =2.1

Patches

Vulnerability mechanics

References

misteralfa-hack.blogspot.com/2018/02/bacnet-entrando-en-materia.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000