MIDGE Firmware
by Racom
CVEs (9)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-20074 | Hig | 0.57 | 8.8 | 0.01 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands. | ||
| CVE-2021-20073 | Hig | 0.57 | 8.8 | 0.00 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries. | ||
| CVE-2021-20075 | Hig | 0.51 | 7.8 | 0.00 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd. | ||
| CVE-2021-20072 | Hig | 0.47 | 7.2 | 0.01 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral. | ||
| CVE-2021-20067 | Med | 0.35 | 5.3 | 0.01 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication. | ||
| CVE-2021-20071 | Med | 0.31 | 4.8 | 0.00 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs. | ||
| CVE-2021-20070 | Med | 0.31 | 4.8 | 0.00 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs. | ||
| CVE-2021-20069 | Med | 0.31 | 4.8 | 0.00 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the regionalSettings.php dialogs. | ||
| CVE-2021-20068 | Med | 0.31 | 4.8 | 0.00 | Feb 16, 2021 | Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages. |
- risk 0.57cvss 8.8epss 0.01
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands.
- risk 0.57cvss 8.8epss 0.00
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries.
- risk 0.51cvss 7.8epss 0.00
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd.
- risk 0.47cvss 7.2epss 0.01
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral.
- risk 0.35cvss 5.3epss 0.01
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication.
- risk 0.31cvss 4.8epss 0.00
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs.
- risk 0.31cvss 4.8epss 0.00
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs.
- risk 0.31cvss 4.8epss 0.00
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the regionalSettings.php dialogs.
- risk 0.31cvss 4.8epss 0.00
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages.