High severityNVD Advisory· Published Nov 14, 2025· Updated Apr 15, 2026

CVE-2021-4471

Description

TG8 Firewall exposes a directory such as /data/ over HTTP without authentication. This directory stores credential files for previously logged-in users. A remote unauthenticated attacker can enumerate and download files within the directory to obtain valid account usernames and passwords, leading to loss of confidentiality and further unauthorized access.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

ssd-disclosure.com/ssd-advisory-tg8-firewall-preauth-rce-and-password-disclosure/nvd
web.archive.org/web/20211024224240/http://www.tg8security.com/nvd
www.vulncheck.com/advisories/tg8-firewall-unauthenticated-user-password-disclosurenvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000