VULNERABILITY INTELLIGENCE
CVE-2021-4470
EPSS probability0.84%
CISA KEVNot currently listed
Published2025-11-14
Last modified2026-06-17
Description
TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to execute arbitrary operating system commands as root, resulting in full device compromise.
Weakness classification
- disclosure@vulncheck.com: CWE-78