CVE-2021-4471: TG8 Firewall

High severity, CVSS 8.7. EPSS: 0.6% chance of exploitation in the next 30 days.

TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in users. A remote unauthenticated attacker can enumerate and download files within the directory to obtain valid account usernames and passwords, leading to loss of confidentiality and further unauthorized access.

Affected products

• TG8 TG8 Firewall: version 0 only

Published 2025-11-14. Last modified 2026-06-17.