TI-2020-10002 CVE-2020-12507 · GHSA-h6x8-4mx9-224h
s::can moni::tools autheticated SQL injection
Priority MEDIUM 42
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection.
No Badger Meter vulnerabilities are listed in CISA KEV.
3 records in Moni · all components
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection.
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.