Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Badger Meter Component: Moni Clear all filters
TI-2020-10004 CVE-2020-12509 · GHSA-64h5-qfvh-m2hc

s::can moni::tools prone to path traversal in camera-file module

Priority MEDIUM 41

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2022-11-07 Fixed in 4.2 CWE-22
TI-2020-10003 CVE-2020-12508 · GHSA-h9m7-7fr7-xhf5

s::can moni::tools prone to path traversal in image-relocator module

Priority MEDIUM 41

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2022-11-07 Fixed in 4.2 CWE-22
TI-2020-10002 CVE-2020-12507 · GHSA-h6x8-4mx9-224h

s::can moni::tools autheticated SQL injection

Priority MEDIUM 42

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00832 Published 2022-11-07 Fixed in 4.2 CWE-89