CVE-2022-27632
Description
Cross-site request forgery (CSRF) vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware versions, WATCH BOOT light RPC-M5C [End of Sale] all firmware versions, WATCH BOOT L-zero RPC-M4L [End of Sale] all firmware versions, WATCH BOOT mini RPC-M4H [End of Sale] all firmware versions, WATCH BOOT nino RPC-M2CS firmware version 1.00A to 1.00D, WATCH BOOT light RPC-M5CS firmware version 1.00A to 1.00D, WATCH BOOT L-zero RPC-M4LS firmware version 1.00A to 1.20A, and Signage Rebooter RPC-M4HSi firmware version 1.00A), PoE Rebooter(PoE BOOT nino PoE8M2 firmware version 1.00A to 1.20A), Scheduler(TIME BOOT mini RSC-MT4H [End of Sale] all firmware versions, TIME BOOT RSC-MT8F [End of Sale] all firmware versions, TIME BOOT RSC-MT8FP [End of Sale] all firmware versions, TIME BOOT mini RSC-MT4HS firmware version 1.00A to 1.10A, and TIME BOOT RSC-MT8FS firmware version 1.00A to 1.00E), and Contact Converter(POSE SE10-8A7B1 firmware version 1.00A to 1.20A) allows a remote attacker to hijack the authentication of an administrator and conduct arbitrary operations by having a user to view a specially crafted page.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| meikyo watch_boot_nino_rpc-m2c_firmware | No range specified | — |
| meikyo watch_boot_light_rpc-m5c_firmware | No range specified | — |
| meikyo watch_boot_l-zero_rpc-m4l_firmware | No range specified | — |
| meikyo watch_boot_mini_rpc-m4h_firmware | No range specified | — |
| meikyo watch_boot_nino_rpc-m2cs_firmware | 1.00a ≤ v ≤ 1.00d | — |
| meikyo watch_boot_light_rpc-m5cs_firmware | 1.00a ≤ v ≤ 1.00d | — |
| meikyo watch_boot_l-zero_rpc-m4ls_firmware | 1.00a ≤ v ≤ 1.20a | — |
| meikyo signage_rebooter_rpc-m4hsi_firmware | 1.00a | — |
| meikyo poe_boot_nino_poe8m2_firmware | 1.00a ≤ v ≤ 1.20a | — |
| meikyo time_boot_mini_rsc-mt4h_firmware | No range specified | — |
| meikyo time_boot_rsc-mt8f_firmware | No range specified | — |
| meikyo time_boot_rsc-mt8fp_firmware | No range specified | — |
| meikyo time_boot_mini_rsc-mt4hs_firmware | 1.00a ≤ v ≤ 1.10a | — |
| meikyo time_boot_rsc-mt8fs_firmware | 1.00a ≤ v ≤ 1.00e | — |
| meikyo pose_se10-8a7b1_firmware | 1.00a ≤ v ≤ 1.20a, No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.