CVE-2022-47917
Last modified
CVE-2022-47917 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to several modules and services of the software. This could allow an attacker to delete arbitrary files and cause a denial-of-service condition. . EPSS estimates a 0.68% chance of exploitation in the next 30 days.
Description
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to several modules and services of the software. This could allow an attacker to delete arbitrary files and cause a denial-of-service condition.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sewio | Real-Time Location System Studio | >= 2.0.0, <= 2.6.2 |
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01Third Party Advisory, US Government Resource
- https://www.cisa.gov/uscert/ics/advisories/icsa-23-012-01Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-47917?
How severe is CVE-2022-47917?
How do I fix CVE-2022-47917?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-47908Stack-based buffer overflow vulnerability in V-Server v4.0.1…7.8
- CVE-2022-47909Livestatus Query Language (LQL) injection in the AuthUser HT…7.8
- CVE-2022-4791The Product Slider and Carousel with Category for WooCommerc…5.4
- CVE-2022-47911Sewio’s Real-Time Location System (RTLS) Studio version 2.0.…7.2
- CVE-2022-47914Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2022-47915The issue was addressed with improved memory handling. This …7.8
- CVE-2022-4792The News & Blog Designer Pack WordPress plugin before 3.3 do…5.4
- CVE-2022-47924An high privileged attacker may pass crafted arguments to th…6.5
- CVE-2022-47925The validate JSON endpoint of the Secvisogram csaf-validator…7.5
- CVE-2022-47926AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/…9.8
- CVE-2022-47927An issue was discovered in MediaWiki before 1.35.9, 1.36.x t…5.5
- CVE-2022-47928In MISP before 2.4.167, there is XSS in the template file up…6.1
Are you affected by CVE-2022-47917?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST