CVE-2022-43483

Name of the Vulnerable Software and Affected Versions Sewio’s Real-Time Location System (RTLS) Studio versions 2.0.0 through 2.6.2

Description The issue is related to improper validation of the input module name to the monitor services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.

Recommendations For versions 2.0.0 through 2.6.2, update to a version that properly validates input module names to prevent remote attackers from accessing sensitive functions and executing arbitrary system commands. At the moment, there is no information about a newer version that contains a fix for this vulnerability.