CVE-2020-12507
HIGHCVSS 8.8/10EPSS 0.69%
Last modified
CVE-2020-12507 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.. EPSS estimates a 0.69% chance of exploitation in the next 30 days.
Description
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Badgermeter | Moni\ | \ | Tool |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-12507?
In s::can moni::tools before version 4.2 an authenticated attacker could get full access to the database through SQL injection. This may result in loss of confidentiality, loss of integrity and DoS.
How severe is CVE-2020-12507?
CVE-2020-12507 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 0.69% probability of exploitation in the next 30 days.
How do I fix CVE-2020-12507?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-12501Improper Authorization vulnerability of Pepperl+Fuchs P+F Co…9.8
- CVE-2020-12502Improper Authorization vulnerability of Pepperl+Fuchs P+F Co…8.8
- CVE-2020-12503Improper Authorization vulnerability of Pepperl+Fuchs P+F Co…7.2
- CVE-2020-12504Improper Authorization vulnerability of Pepperl+Fuchs P+F Co…9.8
- CVE-2020-12505Improper Authentication vulnerability in WAGO 750-8XX series…8.2
- CVE-2020-12506Improper Authentication vulnerability in WAGO 750-8XX series…9.1
- CVE-2020-12508In s::can moni::tools in versions below 4.2 an unauthenticat…7.5
- CVE-2020-12509In s::can moni::tools in versions below 4.2 an unauthenticat…7.5
- CVE-2020-1251An elevation of privilege vulnerability exists in Windows wh…6.7
- CVE-2020-12510The default installation path of the TwinCAT XAR 3.1 softwar…7.3
- CVE-2020-12511Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and b…8.8
- CVE-2020-12512Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and b…5.4
Are you affected by CVE-2020-12507?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST