Siklu MultiHaul TG series devices prior to version 2.0.0 have a critical authentication bypass vulnerability (CWE-306) that permits unauthenticated remote attackers to retrieve device credentials by sending a specific hex-encoded command to TCP port 12777. This allows attackers to gain direct SSH access to the device. The vulnerability has a CVSS 4.0 score of 8.7 (high severity) with network attack vector, no required privileges or user interaction, and high impact on confidentiality. No patch or official remediation details are provided in the available data.

Successful exploitation results in disclosure of randomly generated device credentials, enabling unauthorized SSH access. This compromises device confidentiality and potentially allows full control over the affected device. The vulnerability does not require prior authentication or user interaction, increasing the risk of remote exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to port 12777 to trusted sources only to reduce exposure. Monitor vendor communications for updates or patches addressing this vulnerability.