CVE-2024-1301criticalCWE-89

CVE-2024-1301: critical vulnerability in Badger Meter Monitool

Multiple Vulnerabilities in Badger Meter's Monitool

Published · Updated

Follow this CVE+ Monitor Monitool

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 9.8epss 2.2%
from disclosure to weaponsame day
Published on NVDMar 12
1st PoCFeb 8
SQL injection vulnerability in Badger Meter Monitool affecting versions 4.6.3 and earlier. A remote attacker could send a specially crafted SQL query to the server via the j_username parameter and retrieve the information stored in the database.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Badger Meter · Monitool
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Badger Meter Monitool

In the same product, most dangerous first.

CVE-2024-1303MEDIUMMultiple Vulnerabilities in Badger Meter's MonitoolEPSS 1.0%CVE-2024-1304MEDIUMMultiple Vulnerabilities in Badger Meter's MonitoolEPSS 0.7%CVE-2024-1302HIGHMultiple Vulnerabilities in Badger Meter's MonitoolEPSS 0.5%