CVE-2022-47911 CRITICAL

CVE-2022-47911: CVE-2022-47911

Vendor Sewio
Product RTLS Studio
Weakness CWE-78
Published January 18, 2023
Last update January 16, 2025
View on NVD All CVEs

CVSS base score

9.1/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the backup services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.

Key dates

02Disclosure timeline

January 18, 2023 CVE published
January 16, 2025 Record updated