Vulnerability · Published Mar 12, 2024 · Assigned by INCIBE
CVE-2024-1303Multiple Vulnerabilities in Badger Meter's Monitool
Medium 6.5
In plain English
A medium-severity path traversal in Monitool from Badger Meter. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)1.0%top 35.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows an authenticated attacker to retrieve any file from the device using the download-file functionality.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Badger Meter | Monitool | 4.6.3 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N