Tg8 Firewall vulnerabilities

CVE-2021-4470 [CRITICAL] CWE-78 CVE-2021-4470: TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php TG8 Firewall contains a pre-authentication remote code execution vulnerability in the runphpcmd.php endpoint. The syscmd POST parameter is passed directly to a system command without validation and executed with root privileges. A remote, unauthenticated attacker can supply crafted values to execute arbitrary operating system commands as root, resulti

CVE-2021-4471 [HIGH] CWE-538 CVE-2021-4471: TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory sto TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in users. A remote unauthenticated attacker can enumerate and download files within the directory to obtain valid account usernames and passwords, leading to loss of confidentiality and further unauthorized acces