CVE-2022-47911

CVE-2022-47911 PUBLISHED

Description (CNA)

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the backup services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.

Affected (CNA)

Vendor / product	Versions
Sewio / RTLS Studio	affected 2.0.0 through 2.6.2

CWE

CWE-78

References

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01

CISA-ADP

No English description supplied.

No references supplied.