Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority LOW 29

Cross-site scripting vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00669 Published 2024-03-12 No fix listed CWE-79
Priority LOW 31

Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01041 Published 2024-03-12 No fix listed CWE-22
Priority LOW 35

Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00488 Published 2024-03-12 No fix listed CWE-200
Priority MEDIUM 53

SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02165 Published 2024-03-12 No fix listed CWE-89
Priority MEDIUM 41

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2022-11-07 Fixed in 4.2 CWE-22
Priority MEDIUM 41

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00962 Published 2022-11-07 Fixed in 4.2 CWE-22
Priority MEDIUM 42

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00832 Published 2022-11-07 Fixed in 4.2 CWE-89