CVE-2018-7277: An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices.

Security readout for executives and security teams

CVE-2018-7277 affects RLE Wi-MGR/FDS-Wi 6.2 devices. The reported flaw is persistent cross-site scripting in the device web server, triggered through BACnet handling. A successful attacker could cause malicious JavaScript to be stored and later executed in an administrator's browser. Exposure is most likely where RLE Wi-MGR/FDS-Wi 6.2 devices are deployed on reachable BACnet or management networks. Internet exposure is not stated in the sources and should not be assumed. Treat this as a targeted OT/building-management exposure issue. Prioritize environments where these devices are reachable by broad internal networks or third parties, but avoid emergency escalation unless local exposure or vendor evidence shows higher risk. Mitigation focus: Identify any RLE Wi-MGR/FDS-Wi 6.2 devices in asset inventory.; Check RLE/vendor guidance for firmware updates or official mitigation advice.; Restrict BACnet and web management access to trusted administrative networks..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.