CVE-2022-47911

Name of the Vulnerable Software and Affected Versions Sewio’s Real-Time Location System (RTLS) Studio versions 2.0.0 through 2.6.2

Description The issue is related to improper validation of the input module name to the backup services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.

Recommendations For versions 2.0.0 through 2.6.2, consider restricting access to the backup services of the software to minimize the risk of exploitation. As a temporary workaround, limit the input module name validation to prevent remote attackers from accessing sensitive functions of the application. At the moment, there is no information about a newer version that contains a fix for this vulnerability.