CVE-2021-20075 describes a privilege escalation vulnerability within Racom's MIDGE Firmware version 4.4.40.105, specifically affecting the configd component. This high-severity flaw (CVSS 7.8) allows a local, low-privileged attacker to gain elevated privileges with high impact on confidentiality, integrity, and availability, requiring low attack complexity. While no public exploit code or active exploitation has been observed, and community discussion is minimal, organizations using affected Racom MIDGE devices should prioritize patching to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.4.40.105CPE matchmatch criteria | cpe:2.3:o:racom:m\!dge_firmware:4.4.40.105:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021Racom MIDGE Firmware Multiple Vulnerabilities
Feb 16, 2021