What’s Vulnerable › Vulnerabilities

CVE-2022-28717

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-18 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross-site scripting vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware versions, WATCH BOOT light RPC-M5C [End of Sale] all firmware versions, WATCH BOOT L-zero RPC-M4L [End of Sale] all firmware versions, WATCH BOOT mini RPC-M4H [End of Sale] all firmware versions, WATCH BOOT nino RPC-M2CS firmware version 1.00A to 1.00D, WATCH BOOT light RPC-M5CS firmware version 1.00A to 1.00D, WATCH BOOT L-zero RPC-M4LS firmware version 1.00A to 1.20A, and Signage Rebooter RPC-M4HSi firmware version 1.00A), PoE Rebooter(PoE BOOT nino PoE8M2 firmware version 1.00A to 1.20A), Scheduler(TIME BOOT mini RSC-MT4H [End of Sale] all firmware versions, TIME BOOT RSC-MT8F [End of Sale] all firmware versions, TIME BOOT RSC-MT8FP [End of Sale] all firmware versions, TIME BOOT mini RSC-MT4HS firmware version 1.00A to 1.10A, and TIME BOOT RSC-MT8FS firmware version 1.00A to 1.00E), and Contact Converter(POSE SE10-8A7B1 firmware version 1.00A to 1.20A) allows a remote attacker with the administrative privilege to inject an arbitrary script via unspecified vectors.

Affected products

• Meikyo Poe Boot Nino Poe8M2 Firmware: from 1.00a through 1.20a
• Meikyo Pose Se10-8A7B1 Firmware: from 1.00a through 1.20a
• Meikyo Signage Rebooter Rpc-M4Hsi Firmware: 1.00a
• Meikyo Time Boot Mini Rsc-Mt4H Firmware: all versions
• Meikyo Time Boot Mini Rsc-Mt4Hs Firmware: from 1.00a through 1.10a
• Meikyo Time Boot Rsc-Mt8F Firmware: all versions
• Meikyo Time Boot Rsc-Mt8Fp Firmware: all versions
• Meikyo Time Boot Rsc-Mt8Fs Firmware: from 1.00a through 1.00e
• Meikyo Watch Boot L-Zero Rpc-M4L Firmware: all versions
• Meikyo Watch Boot L-Zero Rpc-M4Ls Firmware: from 1.00a through 1.20a
• Meikyo Watch Boot Light Rpc-M5C Firmware: all versions
• Meikyo Watch Boot Light Rpc-M5Cs Firmware: from 1.00a through 1.00d
• Meikyo Watch Boot Mini Rpc-M4H Firmware: all versions
• Meikyo Watch Boot Nino Rpc-M2C Firmware: all versions
• Meikyo Watch Boot Nino Rpc-M2Cs Firmware: from 1.00a through 1.00d

References

• https://jvn.jp/en/jp/JVN58266015/index.html
• https://www.meikyo.co.jp/vln/
• https://jvn.jp/en/jp/JVN58266015/index.html
• https://www.meikyo.co.jp/vln/

Get alerted when CVE-2022-28717 or the next vulnerability affects your stack