Description
Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery in its backup services. An attacker could take advantage of this vulnerability to execute arbitrary backup operations and cause a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sewio | RTLS Studio | 2.0.0 – ≤ 2.6.2 | — |
Advisories 1
- ICSA-23-012-01 Sewio RTLS Studio CISA ICS & IT advisories · Jan 12, 2023