CVE-2022-43483criticalCWE-78

CVE-2022-43483: critical vulnerability in Sewio RTLS Studio

CVE-2022-43483

Published · Updated

Follow this CVE+ Monitor RTLS Studio

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 1.2%
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the monitor services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Sewio · RTLS Studio
Related CVEs — Sewio RTLS Studio

In the same product, most dangerous first.

CVE-2022-47911CRITICALCVE-2022-47911EPSS 1.2%CVE-2022-45444CRITICALCVE-2022-45444EPSS 0.9%CVE-2022-41989CRITICALCVE-2022-41989EPSS 0.8%CVE-2022-47917MEDIUMCVE-2022-47917EPSS 0.7%CVE-2022-43455MEDIUMCVE-2022-43455EPSS 0.6%CVE-2022-46733MEDIUMCVE-2022-46733EPSS 0.6%