Read the docs

Sewio

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Sewio records in CISA KEV

No Sewio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Real-time Location System Studio 9 records MEDIUM

Records

9 records

TI-2022-22409 CVE-2022-45444 · GHSA-j2j9-pq33-wj97

Hard-coded credentials in Sewio RTLS Studio

Priority MEDIUM 51

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 contains hard-coded passwords for select users in the application’s database.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00945 Published 2023-01-18 No fix listed CWE-259
TI-2022-23735 CVE-2022-47911 · GHSA-5g92-3658-j47r

OS command injection in Sewio RTLS Studio

Priority MEDIUM 44

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the backup services of the software.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01237 Published 2023-01-18 No fix listed CWE-78
TI-2022-21273 CVE-2022-43483 · GHSA-mw9w-2x4j-fvhh

OS command injection in Sewio RTLS Studio

Priority MEDIUM 44

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the monitor services of the software.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01237 Published 2023-01-18 No fix listed CWE-78
TI-2022-20329 CVE-2022-41989 · GHSA-c99p-c624-4w53

Out-of-bounds write in Sewio RTLS Studio

Priority MEDIUM 44

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report payloads during communication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0078 Published 2023-01-18 No fix listed CWE-787
TI-2022-23112 CVE-2022-46733 · GHSA-9hv8-pfv2-wqfp

Cross-site scripting in Sewio RTLS Studio

Priority MEDIUM 42

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site scripting in its backup services.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00568 Published 2023-01-18 No fix listed CWE-79
TI-2022-23482 CVE-2022-47395 · GHSA-8q28-r8h6-4fcg

Cross-site request forgery in Sewio RTLS Studio

Priority LOW 35

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its monitor services.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00326 Published 2023-01-18 No fix listed CWE-352
TI-2022-22203 CVE-2022-45127 · GHSA-fw5r-85gc-4v62

Cross-site request forgery in Sewio RTLS Studio

Priority LOW 35

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its backup services.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00326 Published 2023-01-18 No fix listed CWE-352
TI-2022-23737 CVE-2022-47917 · GHSA-4pmf-3p6f-p5g2

Improper input validation in Sewio RTLS Studio

Priority LOW 31

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to several modules and services of the software.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00684 Published 2023-01-18 No fix listed CWE-20
TI-2022-21247 CVE-2022-43455 · GHSA-32pr-mxf9-qhx8

Improper input validation in Sewio RTLS Studio

Priority LOW 30

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to the service_start, service_stop, and service_restart modules of…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00587 Published 2023-01-18 No fix listed CWE-20
Open these records in search →