Approved changes feed: RSS · Atom

cpe:2.3:a:sewio:rtls_studio:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSewio (6fa81d0d-1992-5c89-9eba-ea01dae4d83a)
ProductRtls Studio (45bf462c-8681-5a64-b986-a16a129f143c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47917 vulnerable 2026-06-08 05:50:40.965972 CVE-2022-47917
MEDIUM (6.8)
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to several modules and services of the software. This could allow an attacker to delete arbitrary files and cause a denial-of-service condition.
Published: 2023-01-18T00:48:40.337Z
Updated: 2025-01-16T21:59:31.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47911 vulnerable 2026-06-08 05:50:40.965040 CVE-2022-47911
CRITICAL (9.1)
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the backup services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.
Published: 2023-01-18T00:47:02.611Z
Updated: 2025-01-16T21:59:38.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47395 vulnerable 2026-06-08 05:50:40.376162 CVE-2022-47395
HIGH (8.1)
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its monitor services. An attacker could take advantage of this vulnerability to execute arbitrary maintenance operations and cause a denial-of-service condition.
Published: 2023-01-18T00:45:32.175Z
Updated: 2025-01-16T21:59:46.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46733 vulnerable 2026-06-08 05:50:39.244517 CVE-2022-46733
MEDIUM (6.3)
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site scripting in its backup services. An attacker could take advantage of this vulnerability to execute arbitrary commands.
Published: 2023-01-18T00:43:45.382Z
Updated: 2025-01-16T21:59:53.384Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45444 vulnerable 2026-06-08 05:50:36.357548 CVE-2022-45444
CRITICAL (10)
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 contains hard-coded passwords for select users in the application’s database. This could allow a remote attacker to login to the database with unrestricted access.
Published: 2023-01-18T00:41:51.151Z
Updated: 2025-01-16T22:00:00.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45127 vulnerable 2026-06-08 05:50:35.685239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43483 vulnerable 2026-06-08 05:49:32.119718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43455 vulnerable 2026-06-08 05:49:31.991503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41989 vulnerable 2026-06-08 05:49:29.066706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.