The SPON IP Network Broadcast System contains an arbitrary file read vulnerability (CWE-22) in the rj_get_token.php endpoint. The root cause is improper input validation on the jsondata[url] parameter, enabling directory traversal attacks. An unauthenticated attacker can exploit this by sending a specially crafted POST request to read arbitrary files on the server. The affected version range is unspecified, but all versions are considered vulnerable. No vendor patch or fix information is currently available.

Successful exploitation allows unauthenticated remote attackers to read arbitrary files on the affected system. This can lead to exposure of sensitive information such as system configuration files, credentials, or internal application logic. The CVSS 4.0 base score is 8.7, indicating a high impact with network attack vector, no required privileges or user interaction, and high confidentiality impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the vulnerable endpoint and monitor for suspicious POST requests targeting rj_get_token.php. Implement web application firewall (WAF) rules to detect and block directory traversal patterns in the jsondata[url] parameter.