Read the docs

RACOM

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

RACOM records in CISA KEV

No RACOM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
M!dge Firmware 9 records MEDIUM

Records

10 records

TI-2025-24927 CVE-2025-36729 · GHSA-mx3f-7vgq-xf97

RACOM M!DGE2 Privilege Escalation via SDK Testing Endpoint

Priority HIGH 67

A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including the master admin password.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00439 Published 2025-08-26 No fix listed CWE-269
TI-2021-03378 CVE-2021-20074 · GHSA-592w-g5fc-w6j9

OS command injection in Racom MIDGE Firmware

Priority MEDIUM 41

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01284 Published 2021-02-16 No fix listed CWE-78
TI-2021-03376 CVE-2021-20072 · GHSA-w886-cxvw-j48v

Path traversal in Racom MIDGE Firmware

Priority LOW 35

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01476 Published 2021-02-16 No fix listed CWE-22
TI-2021-03371 CVE-2021-20067 · GHSA-75gc-pc9h-g4g3

Missing authentication in Racom MIDGE Firmware

Priority LOW 26

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00871 Published 2021-02-16 No fix listed CWE-306
TI-2021-03375 CVE-2021-20071 · GHSA-r375-22x8-pwjm

Cross-site scripting in Racom MIDGE Firmware

Priority LOW 23

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2021-02-16 No fix listed CWE-79
TI-2021-03374 CVE-2021-20070 · GHSA-vf8h-vpp7-4f7c

Cross-site scripting in Racom MIDGE Firmware

Priority LOW 23

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2021-02-16 No fix listed CWE-79
TI-2021-03373 CVE-2021-20069 · GHSA-j7wx-jvmh-x827

Cross-site scripting in Racom MIDGE Firmware

Priority LOW 23

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the regionalSettings.php dialogs.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2021-02-16 No fix listed CWE-79
TI-2021-03372 CVE-2021-20068 · GHSA-2982-268x-jwcx

Cross-site scripting in Racom MIDGE Firmware

Priority LOW 23

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2021-02-16 No fix listed CWE-79
Open these records in search →