CVE-2022-46733 MEDIUM

CVE-2022-46733: CVE-2022-46733

Vendor Sewio
Product RTLS Studio
Weakness CWE-79 · XSS
Published January 18, 2023
Last update January 16, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site scripting in its backup services. An attacker could take advantage of this vulnerability to execute arbitrary commands.

Key dates

02Disclosure timeline

January 18, 2023 CVE published
January 16, 2025 Record updated