CVE-2021-4470
CriticalSummary
TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to execute arbitrary operating system commands as root, resulting in full device compromise.
Risk Assessment
An attacker can gain full control over the device, leading to complete compromise of the system and data.
Recommendation
It is recommended to immediately restrict access to the device, apply available patches, and implement strong authentication mechanisms.
Original NVD description (English source)
TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to execute arbitrary operating system commands as root, resulting in full device compromise.