Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2022-41989

CVE-2022-41989

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report payloads during communication. This allows an attacker to send an exceedingly long payload, resulting in an out-of-bounds write to cause a denial-of-service condition or code execution.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio
CVE-2022-43455

CVE-2022-43455

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to the service_start, service_stop, and service_restart modules of the software. This could allow an attacker to start, stop, or restart arbitrary services running on the server.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio
CVE-2022-43483

CVE-2022-43483

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the monitor services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio
CVE-2022-45127

CVE-2022-45127

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its backup services. An attacker could take advantage of this vulnerability to execute arbitrary backup operations and cause a denial-of-service condition.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio
CVE-2022-45444

CVE-2022-45444

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 contains hard-coded passwords for select users in the application’s database. This could allow a remote attacker to login to the database with unrestricted access.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio
CVE-2022-46733

CVE-2022-46733

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site scripting in its backup services. An attacker could take advantage of this vulnerability to execute arbitrary commands.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio
CVE-2022-47395

CVE-2022-47395

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its monitor services. An attacker could take advantage of this vulnerability to execute arbitrary maintenance operations and cause a denial-of-service condition.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio
CVE-2022-47911

CVE-2022-47911

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the backup services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.

CVSS 3.1 · 9.1 Critical EPSS 1.2% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio
CVE-2022-47917

CVE-2022-47917

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to several modules and services of the software. This could allow an attacker to delete arbitrary files and cause a denial-of-service condition.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Sewio
Products
Real-time Location System Studio