PT-2021-13747

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue in Racom's MIDGE Firmware allows attackers to conduct cross-site scripting attacks via the "regionalSettings.php" dialogs. This could potentially lead to unauthorized access or...

CVE-2021-20072: Improper Limitation of a Pathname to a Restricted Directory

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral...

PT-2021-13745

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue allows attackers to view sensitive syslog events without authentication. This could potentially expose sensitive information. Recommendations: For Racom's MIDGE Firmware version...

PT-2021-13746

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages. Recommendations: For Racom's MIDGE Firmware version 4.4.40.105,...

PT-2021-13749

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue allows attackers to conduct cross-site scripting attacks via the "sms.php" dialogs. Recommendations: For Racom's MIDGE Firmware version 4.4.40.105, consider restricting access t...

PT-2021-13748

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue allows attackers to conduct cross-site scripting attacks via the "virtualization.php" dialogs. This can potentially lead to unauthorized access or control of the system...

PT-2021-13751

Name of the Vulnerable Software and Affected Versions: Racom's MIDGE Firmware version 4.4.40.105 Description: The issue in Racom's MIDGE Firmware allows for cross-site request forgeries. This means an attacker could potentially trick a user into performing unintended actions on a web application...