Vendors / Badger Meter Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 4 CVSS 7.0–8.9
Exploited now Badger Meter records in CISA KEV No Badger Meter vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 53
SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02165 · Published 2024-03-12 · No fix listed CWE-89
Priority MEDIUM 42
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00832 · Published 2022-11-07 · Fixed in 4.2 CWE-89
Priority MEDIUM 41
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00962 · Published 2022-11-07 · Fixed in 4.2 CWE-22
Priority MEDIUM 41
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00962 · Published 2022-11-07 · Fixed in 4.2 CWE-22
Priority LOW 35
Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier.
CVSS 3.1 HIGH 7.3· Network · Low privileges · User interaction · EPSS 0.00488 · Published 2024-03-12 · No fix listed CWE-200
Priority LOW 31
Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01041 · Published 2024-03-12 · No fix listed CWE-22
Priority LOW 29
Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier.
CVSS 3.1 MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00669 · Published 2024-03-12 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical1 High4 Medium2 Low0 No CVSS0