CVE-2020-12508

In s::can moni::tools in versions below 4.2 an unauthenticated attacker could get any file from the device by path traversal in the image-relocator module.

Score

CVSS 3.1 7.5 High

Status

Modified - info@cert.vde.com

Published

2022-11-15

Last modified

2025-05-01

Weaknesses

CWE-22

Affected products

• Moni\ (Badgermeter)
• Monitools (Scan)

References

• https://www.s-can.at/en/the-new-monitool-v4-2-security-first/