Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-28717

Quick assessment

Affected
MEIKYO ELECTRIC CO.,LTD. Rebooter, PoE Rebooter, Scheduler, and Contact Converter
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

MEIKYO ELECTRIC PoE BOOT nino PoE8M2和POSE SE10-8A7B1都是日本MEIKYO ELECTRIC公司的产品。PoE BOOT nino PoE8M2是一种网络远程电源控制。POSE SE10-8A7B1是一种网络远程电源控制接触转换器。 MEIKYO ELECTRIC 多款产品存在跨站脚本漏洞，该漏洞源于用户提供的数据未充分清理。远程攻击者利用该漏洞可以诱骗受害者跟踪特制链接，并在易受攻击的网站上下文中的用户浏览器中执行任意 HTML 和脚本代码。以下产品和版

AI Predicted 6.1 Difficulty: Easy EPSS 0.58% · P47
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-28717

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cross-site scripting vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware versions, WATCH BOOT light RPC-M5C [End of Sale] all firmware versions, WATCH BOOT L-zero RPC-M4L [End of Sale] all firmware versions, WATCH BOOT mini RPC-M4H [End of Sale] all firmware versions, WATCH BOOT nino RPC-M2CS firmware version 1.00A to 1.00D, WATCH BOOT light RPC-M5CS firmware version 1.00A to 1.00D, WATCH BOOT L-zero RPC-M4LS firmware version 1.00A to 1.20A, and Signage Rebooter RPC-M4HSi firmware version 1.00A), PoE Rebooter(PoE BOOT nino PoE8M2 firmware version 1.00A to 1.20A), Scheduler(TIME BOOT mini RSC-MT4H [End of Sale] all firmware versions, TIME BOOT RSC-MT8F [End of Sale] all firmware versions, TIME BOOT RSC-MT8FP [End of Sale] all firmware versions, TIME BOOT mini RSC-MT4HS firmware version 1.00A to 1.10A, and TIME BOOT RSC-MT8FS firmware version 1.00A to 1.00E), and Contact Converter(POSE SE10-8A7B1 firmware version 1.00A to 1.20A) allows a remote attacker with the administrative privilege to inject an arbitrary script via unspecified vectors.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
多款MEIKYO ELECTRIC产品跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MEIKYO ELECTRIC PoE BOOT nino PoE8M2和POSE SE10-8A7B1都是日本MEIKYO ELECTRIC公司的产品。PoE BOOT nino PoE8M2是一种网络远程电源控制。POSE SE10-8A7B1是一种网络远程电源控制接触转换器。 MEIKYO ELECTRIC 多款产品存在跨站脚本漏洞，该漏洞源于用户提供的数据未充分清理。远程攻击者利用该漏洞可以诱骗受害者跟踪特制链接，并在易受攻击的网站上下文中的用户浏览器中执行任意 HTML 和脚本代码。以下产品和版
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
MEIKYO ELECTRIC CO.,LTD. Rebooter, PoE Rebooter, Scheduler, and Contact Converter Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware versions, WATCH BOOT light RPC-M5C [End of Sale] all firmware versions, WATCH BOOT L-zero RPC-M4L [End of Sale] all firmware versions, WATCH BOOT mini RPC-M4H [End of Sale] all firmware versions, -

II. Public POCs for CVE-2022-28717

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-28717

请登录查看更多情报信息。

Vendor Advisories for CVE-2022-28717 (1)

Other References for CVE-2022-28717 (1)

IV. Related Vulnerabilities

Same product: Rebooter, PoE Rebooter, Scheduler, and Contact Converter
Same vendor: MEIKYO ELECTRIC CO.,LTD.

V. Comments for CVE-2022-28717

No comments yet

Leave a comment