VendorsRacomm%5C!dge_firmwareall versions
Vulnerabilities

Racom M!DGE Firmware

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

9CVEs
CVE-2021-20074
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands.
Published 2021-02-16 · Modified
9.0EPSS 0.013
CVE-2021-20073
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries.
Published 2021-02-16 · Modified
8.8EPSS 0.005
CVE-2021-20072
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral.
Published 2021-02-16 · Modified
8.7EPSS 0.015
CVE-2021-20075
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd.
Published 2021-02-16 · Modified
7.8EPSS 0.002
CVE-2021-20067
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication.
Published 2021-02-16 · Modified
5.3EPSS 0.009
CVE-2021-20068
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages.
Published 2021-02-16 · Modified
4.8EPSS 0.005
CVE-2021-20069
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the regionalSettings.php dialogs.
Published 2021-02-16 · Modified
4.8EPSS 0.005
CVE-2021-20070
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs.
Published 2021-02-16 · Modified
4.8EPSS 0.005
CVE-2021-20071
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs.
Published 2021-02-16 · Modified
4.8EPSS 0.005