CVE-2022-43483

—

CVSS 3.1

7.2 high

EPSS

1%p67

Published

Jan 18, 2023 (Jan 18, 2023)

Modified

Jun 17, 2026

Description

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the monitor services of the software. This could allow a remote attacker to access sensitive functions of the application and execute arbitrary system commands.

Vendors: sewio
Products: real-time location system studio
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news1 stories

CISA Warns of Flaws Affecting Industrial Control Systems from Major Manufacturers

The Hacker NewsJan 17, 05:53 UTC · Jan 17, 2023Advisory CVE-2022-45444 CVE-2022-47911 CVE-2022-43483+5 CVEs