Sewio kayıtları

sewio üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 3
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2022-45444İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 contains hard-coded passwords for select usesewio · real-time location system studio · CWE-259 Kimlik doğrulamasız Gömülü kimlik bilgisi	Kritik9,8	—	%0,9	17 Oca 2023
39İzleyin	CVE-2022-41989İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report sewio · real-time location system studio · CWE-787 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%0,8	17 Oca 2023
38İzleyin	CVE-2022-46733İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site scripting in itssewio · real-time location system studio · CWE-79 pre-auth RCE XSS	Kritik9,6	—	%0,6	17 Oca 2023
32İzleyin	CVE-2022-45127İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery sewio · real-time location system studio · CWE-352 pre-auth RCE CSRF	Yüksek8,1	—	%0,3	17 Oca 2023
32İzleyin	CVE-2022-47395İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery sewio · real-time location system studio · CWE-352 pre-auth RCE CSRF	Yüksek8,1	—	%0,3	17 Oca 2023
28İzleyin	CVE-2022-43483İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module sewio · real-time location system studio · CWE-78 RCE Komut enjeksiyonu	Yüksek7,2	—	%1,2	17 Oca 2023
28İzleyin	CVE-2022-47911İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module sewio · real-time location system studio · CWE-78 RCE Komut enjeksiyonu	Yüksek7,2	—	%1,2	17 Oca 2023
26İzleyin	CVE-2022-47917İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation osewio · real-time location system studio · CWE-20	Orta6,5	—	%0,7	17 Oca 2023
26İzleyin	CVE-2022-43455İstismar yok	Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation osewio · real-time location system studio · CWE-20	Orta6,5	—	%0,6	17 Oca 2023

CVE-2022-45444
39İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 contains hard-coded passwords for select use
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
sewio · real-time location system studio17 Oca 2023
CVE-2022-41989
39İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Bellek hatası
sewio · real-time location system studio17 Oca 2023
CVE-2022-46733
38İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site scripting in its
KritikCVSS 9,6İstismar yokEPSS %1
- pre-auth RCE
- XSS
sewio · real-time location system studio17 Oca 2023
CVE-2022-45127
32İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery
YüksekCVSS 8,1İstismar yokEPSS %0
- pre-auth RCE
- CSRF
sewio · real-time location system studio17 Oca 2023
CVE-2022-47395
32İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery
YüksekCVSS 8,1İstismar yokEPSS %0
- pre-auth RCE
- CSRF
sewio · real-time location system studio17 Oca 2023
CVE-2022-43483
28İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
sewio · real-time location system studio17 Oca 2023
CVE-2022-47911
28İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not properly validate the input module
YüksekCVSS 7,2İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
sewio · real-time location system studio17 Oca 2023
CVE-2022-47917
26İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation o
OrtaCVSS 6,5İstismar yokEPSS %1
sewio · real-time location system studio17 Oca 2023
CVE-2022-43455
26İzleyin
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to improper input validation o
OrtaCVSS 6,5İstismar yokEPSS %1
sewio · real-time location system studio17 Oca 2023