CVE-2021-20074

HIGH

Racom MIDGE Firmware 4.4.40.105 - OS Command Injection

Title source: llm
STIX 2.1

Description

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2021-04

Scores

CVSS v3 8.8
EPSS 0.0124
EPSS Percentile 65.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
racom/m\!dge_firmware 4.4.40.105
Published Feb 16, 2021
Tracked Since Feb 18, 2026