CVE-2021-20074 is a critical vulnerability affecting Racom MIDGE Firmware 4.4.40.105, allowing authenticated users to bypass the restricted command line interface and execute arbitrary operating system commands. With a CVSS score of 8.8 (High), this flaw presents a significant risk as it can be exploited remotely with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.4.40.105CPE matchmatch criteria | cpe:2.3:o:racom:m\!dge_firmware:4.4.40.105:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021