Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the monitor services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.
References
| Link | Resource |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01 | Third Party Advisory US Government Resource |
| https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01 | Third Party Advisory US Government Resource |
Configurations
History
21 Nov 2024, 07:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01 - Third Party Advisory, US Government Resource | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
07 Nov 2023, 03:53
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the monitor services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands. |
Information
Published : 2023-01-18 01:15
Updated : 2024-11-21 07:26
NVD link : CVE-2022-43483
Mitre link : CVE-2022-43483
CVE.ORG link : CVE-2022-43483
JSON object : View
Products Affected
sewio
- real-time_location_system_studio
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')