CVE-2018-7277: Rletech Fds-Wi Firmware

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server. Remote attackers can inject malicious JavaScript code using the device's BACnet implementation. This is similar to a Cross Protocol Injection with SNMP.

Affected products

• Rletech Fds-Wi Firmware: version 6.2 only
• Rletech Wi-Mgr Firmware: version 6.2 only

Published 2018-02-21. Last modified 2026-06-17.