Vulnerabilities > Badgermeter

DATE CVE VULNERABILITY TITLE RISK
2022-11-15 CVE-2020-12507 SQL Injection vulnerability in Badgermeter Moni::Tool 4.2
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection.
network
low complexity
badgermeter CWE-89
8.8
2022-11-15 CVE-2020-12508 Path Traversal vulnerability in Badgermeter Moni::Tool
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.
network
low complexity
badgermeter CWE-22
7.5
2022-11-07 CVE-2020-12509 Path Traversal vulnerability in Badgermeter Moni::Tool
In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the camera-file module.
network
low complexity
badgermeter CWE-22
7.5