What’s Vulnerable › Vulnerabilities

CVE-2020-12507: s::can moni::tools autheticated SQL injection

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-15 · updated 2026-06-17
• Weakness: CWE-89

Description

In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.

Affected products

• Badgermeter Moni::Tool: 4.2

References

• https://www.s-can.at/en/the-new-monitool-v4-2-security-first/
• https://www.s-can.at/en/the-new-monitool-v4-2-security-first/

Get alerted when CVE-2020-12507 or the next vulnerability affects your stack