CVE-2024-1303

6.5 mediumEPSS 1.0%

Medium (6.5) in badgermeter monitool. EPSS 1.0% chance of exploitation in the next 30 days.

Incorrectly limiting the path to a restricted directory vulnerability in Badger Meter Monitool that affects versions up to 4.6.3 and earlier. This vulnerability allows an authenticated attacker to retrieve any file from the device using the download-file functionality.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2024-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

badgermeter:monitool

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool

Check your stack JSON