Approved changes feed: RSS · Atom

cpe:2.3:a:badgermeter:moni\:\:tool:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBadgermeter (31e1a30a-0aab-5610-a211-2019803f0c9c)
ProductMoni::Tool (63ea9db9-5206-51a2-a33c-6ed349b373d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1302 vulnerable 2026-06-08 06:25:39.768339 Multiple Vulnerabilities in Badger Meter's Monitool
HIGH (7.3)
Information exposure vulnerability in Badger Meter Monitool affecting versions up to 4.6.3 and earlier. A local attacker could change the application's file parameter to a log file obtaining all sensitive information such as database credentials.
Published: 2024-03-12T15:26:52.926Z
Updated: 2024-08-12T14:51:12.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1301 vulnerable 2026-06-08 06:25:39.766020 Multiple Vulnerabilities in Badger Meter's Monitool
CRITICAL (9.8)
SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the j_username parameter and retrieve the information stored in the database.
Published: 2024-03-12T15:24:43.061Z
Updated: 2024-08-12T14:48:20.912Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12509 vulnerable 2026-06-08 05:17:58.459074 s::can moni::tools prone to path traversal in camera-file module
HIGH (7.5)
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.
Published: 2022-11-07T09:42:27.370Z
Updated: 2025-05-02T18:32:10.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12508 vulnerable 2026-06-08 05:17:58.458448 s::can moni::tools prone to path traversal in image-relocator module
HIGH (7.5)
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.
Published: 2022-11-07T09:42:05.016Z
Updated: 2025-05-01T14:55:22.349Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.