Sewio vulnerabilities
We track 7 vulnerabilities in Sewio products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on January 18, 2023.
Latest Sewio vulnerabilities
- 7.2 High severity
RTLS Studio: Improper Neutralization of Special Elements used in an OS Command
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the backup services of the software. This could allow a remote attacker to access sensitive functions of the app
- 8.1 High severity
RTLS Studio: Cross-Site Request Forgery
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its monitor services. An attacker could take advantage of this vulnerability to execute arbitrary maintenance operati
- 9.6 Critical severity
RTLS Studio: Improper Neutralization of Input During Web Page Generation
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site scripting in its backup services. An attacker could take advantage of this vulnerability to execute arbitrary commands.
- 9.8 Critical severity
RTLS Studio: Use of Hard-coded Credentials
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 contains hard-coded passwords for select users in the application’s database. This could allow a remote attacker to login to the database with unrestricted access.
- 8.1 High severity
RTLS Studio: Cross-Site Request Forgery
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its backup services. An attacker could take advantage of this vulnerability to execute arbitrary backup operations an
- 7.2 High severity
RTLS Studio: Improper Neutralization of Special Elements used in an OS Command
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module name to the monitor services of the software. This could allow a remote attacker to access sensitive functions of the ap
- 9.8 Critical severity
RTLS Studio: Out-of-bounds Write
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report payloads during communication. This allows an attacker to send an exceedingly long payload, resulting in an out-of-bound