PT-2023-15527 · Sewio · Sewio'S Real-Time Location System (Rtls) Studio

·

CVE-2022-47917

·

Publicado

2023-01-18

·

Atualizado

2023-01-26

CVSS v3.1

6.8

Média

VetorAV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Sewio’s Real-Time Location System (RTLS) Studio versions 2.0.0 through 2.6.2
Description The issue is related to improper input validation of user input to several modules and services of the software. This could allow an attacker to delete arbitrary files and cause a denial-of-service condition.
Recommendations For versions 2.0.0 through 2.6.2, update to a version that fixes the improper input validation issue to prevent arbitrary file deletion and denial-of-service conditions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2022-47917

Produtos afetados

Sewio'S Real-Time Location System (Rtls) Studio