This vulnerability (CVE-2024-22154) in SNP Digital SalesKing allows unauthorized actors to access sensitive information. It has a CVSS 3.1 base score of 7.5, indicating high severity, with an attack vector over the network, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to confidentiality (exposure of sensitive information) without affecting integrity or availability. The affected versions include all versions up to 1.6.15. No patch or official remediation level has been published by the vendor, and no known exploits have been reported.

An attacker can gain unauthorized access to sensitive information within the SalesKing product, potentially leading to data breaches. The confidentiality impact is high, but there is no impact on integrity or availability. This could result in exposure of confidential business or customer data depending on the deployment context.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround has been published, organizations should monitor vendor communications for updates. Until a fix is available, limit network exposure of the affected SalesKing instances and apply strict access controls to reduce the risk of exploitation.