Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: RACOM Component: M!dge Firmware Clear all filters
TI-2021-03376 CVE-2021-20072 · GHSA-w886-cxvw-j48v

Path traversal in Racom MIDGE Firmware

Priority LOW 35

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01476 Published 2021-02-16 No fix listed CWE-22
TI-2021-03375 CVE-2021-20071 · GHSA-r375-22x8-pwjm

Cross-site scripting in Racom MIDGE Firmware

Priority LOW 23

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2021-02-16 No fix listed CWE-79
TI-2021-03374 CVE-2021-20070 · GHSA-vf8h-vpp7-4f7c

Cross-site scripting in Racom MIDGE Firmware

Priority LOW 23

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2021-02-16 No fix listed CWE-79
TI-2021-03378 CVE-2021-20074 · GHSA-592w-g5fc-w6j9

OS command injection in Racom MIDGE Firmware

Priority MEDIUM 41

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01284 Published 2021-02-16 No fix listed CWE-78
TI-2021-03373 CVE-2021-20069 · GHSA-j7wx-jvmh-x827

Cross-site scripting in Racom MIDGE Firmware

Priority LOW 23

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the regionalSettings.php dialogs.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2021-02-16 No fix listed CWE-79
TI-2021-03372 CVE-2021-20068 · GHSA-2982-268x-jwcx

Cross-site scripting in Racom MIDGE Firmware

Priority LOW 23

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00485 Published 2021-02-16 No fix listed CWE-79
TI-2021-03371 CVE-2021-20067 · GHSA-75gc-pc9h-g4g3

Missing authentication in Racom MIDGE Firmware

Priority LOW 26

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00871 Published 2021-02-16 No fix listed CWE-306