This vulnerability arises from improper handling of malformed input in the configuration processing logic of the affected component. An attacker who is authenticated and has administrative privileges can exploit this flaw by providing crafted configuration data, resulting in a stack-based buffer overflow. The overflow may enable remote code execution with root privileges or cause a denial of service by crashing the system. The CVSS 3.1 base score is 7.2, reflecting high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to remote code execution with root privileges, allowing full system compromise. Alternatively, it can cause a denial of service by crashing the affected system. The attacker must be authenticated with administrative privileges to exploit this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict administrative access and validate configuration inputs carefully to mitigate risk.