VULNERABILITY INTELLIGENCE

CVE-2022-41989

CVSS score9 CRITICAL
EPSS probability0.78%
CISA KEVNot currently listed
Published2023-01-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Description

Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 does not validate the length of RTLS report payloads during communication. This allows an attacker to send an exceedingly long payload, resulting in an out-of-bounds write to cause a denial-of-service condition or code execution.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-787

Primary references