VULNERABILITY INTELLIGENCE

CVE-2024-1303

CVSS score6.5 MEDIUM
EPSS probability1.04%
CISA KEVNot currently listed
Published2024-03-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows an authenticated attacker to retrieve any file from the device using the download-file functionality.

Weakness classification

  • cve-coordination@incibe.es: CWE-22
  • nvd@nist.gov: CWE-22

Primary references