Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2021-20071

18
FAUCET Score

CVE-2021-20071 is a cross-site scripting (XSS) vulnerability found in Racom MIDGE Firmware version 4.4.40.105, specifically within the sms.php dialogs. This medium-severity vulnerability (CVSS 4.8) requires high privileges and user interaction for exploitation, potentially leading to limited impact on confidentiality and integrity. There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
4.4.40.105CPE matchmatch criteria
cpe:2.3:o:racom:m\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

4.8MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
1.7
Impact Score
2.7
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.47%
Probability of exploitation in next 30 days
EPSS Percentile
37.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0047 is in the 57th percentile among its peer group of 4,931 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (7)

esetvendor investigatingvia llm_extracted
hyperledgervendor investigatingvia llm_extracted
mariadbvendor investigatingvia llm_extracted
omronvendor investigatingvia llm_extracted
openrefinevendor investigatingvia llm_extracted
pnpmvendor investigatingvia llm_extracted
twiliovendor investigatingvia llm_extracted

Vendor Advisories (7)

twiliollm-twilio-5bc93483e95ca8d9HIGH

Racom MIDGE Firmware Multiple Vulnerabilities

Feb 16, 2021
esetllm-eset-4334cadcaad72de8HIGH

Racom MIDGE Firmware Multiple Vulnerabilities

Feb 16, 2021
hyperledgerllm-hyperledger-d290ad2ce0850a8aHIGH

Racom MIDGE Firmware Multiple Vulnerabilities

Feb 16, 2021
pnpmllm-pnpm-815ee6eda9eeb23cHIGH

Racom MIDGE Firmware Multiple Vulnerabilities

Feb 16, 2021
omronllm-omron-603b1f6309c7a604HIGH

Racom MIDGE Firmware Multiple Vulnerabilities

Feb 16, 2021
openrefinellm-openrefine-8a21d7a74db668b9HIGH

Racom MIDGE Firmware Multiple Vulnerabilities

Feb 16, 2021
mariadbllm-mariadb-2cd89574dccaf772HIGH

Racom MIDGE Firmware Multiple Vulnerabilities

Feb 16, 2021

References

tenable.com / security/research/tra-2021-04
Third Party Advisory