Read the docs

Badger Meter

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Badger Meter records in CISA KEV

No Badger Meter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records

Priority MEDIUM 53

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02165 Published 2024-03-12 No fix listed CWE-89
Priority MEDIUM 42

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00832 Published 2022-11-07 Fixed in 4.2 CWE-89
Priority MEDIUM 41

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2022-11-07 Fixed in 4.2 CWE-22
Priority MEDIUM 41

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2022-11-07 Fixed in 4.2 CWE-22
Priority LOW 35

Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00488 Published 2024-03-12 No fix listed CWE-200
Priority LOW 31

Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01041 Published 2024-03-12 No fix listed CWE-22
Priority LOW 29

Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00669 Published 2024-03-12 No fix listed CWE-79
Open these records in search →