CVE-2018-7278: An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices.

Security readout for executives and security teams

CVE-2018-7278 affects RLE FDS-PC and FDS-PC-DP 2.1 protocol converters. A remote attacker may persist malicious JavaScript in the device web server through BACnet-related input. Business risk depends on whether these OT devices are exposed to untrusted networks and who uses their web interface. Exposure is likely limited to organizations running RLE FDS-PC or FDS-PC-DP 2.1 devices with BACnet and web management reachable from attacker-accessible networks. Treat this as an OT exposure review item, not a confirmed emergency. Prioritize if affected devices bridge building or facility networks and are reachable beyond tightly controlled management segments. Mitigation focus: Check RLE/vendor guidance for fixed firmware or supported mitigation.; Restrict BACnet and web management access to trusted OT management networks.; Block internet exposure for affected device management interfaces..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.