Lucene search

K
cvelistMitreCVELIST:CVE-2018-7278
HistoryOct 03, 2022 - 4:21 p.m.

CVE-2018-7278

2022-10-0316:21:49
mitre
www.cve.org
rle protocol converter
fds-pc
fds-pc-dp
remote attackers
malicious javascript code
bacnet
persistent xss
cross protocol injection
snmp

0.001 Low

EPSS

Percentile

45.4%

An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device’s BACnet implementation. This is similar to a Cross Protocol Injection with SNMP.

0.001 Low

EPSS

Percentile

45.4%

Related for CVELIST:CVE-2018-7278