CVEvulnerability

CVE-2022-41989

9.8 CRITICAL Published 2023-01-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.0 CRITICAL — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-787

Description

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report payloads during communication. This allows an attacker to send an exceedingly long payload, resulting in an out-of-bounds write to cause a denial-of-service condition or code execution.

Affected configurations

• sewio real-time location system studio (>= 2.0.0. <= 2.6.2)

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References