Lucene search

K
nvd[email protected]NVD:CVE-2022-47917
HistoryJan 18, 2023 - 1:15 a.m.

CVE-2022-47917

2023-01-1801:15:13
CWE-20
web.nvd.nist.gov
3
sewio real-time location system
input validation
vulnerability
arbitrary files
denial-of-service

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

33.2%

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation of user input to several modules and services of the software. This could allow an attacker to delete arbitrary files and cause a denial-of-service condition.

Affected configurations

Nvd
Node
sewioreal-time_location_system_studioRange2.0.02.6.2
VendorProductVersionCPE
sewioreal-time_location_system_studio*cpe:2.3:a:sewio:real-time_location_system_studio:*:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

33.2%

Related for NVD:CVE-2022-47917