This vulnerability (CVE-2024-25911) in Skymoon Labs MoveTo is classified as CWE-862 (Missing Authorization). It affects all versions up to 6.2 and allows an attacker without privileges to access or invoke functionality that should be restricted. The CVSS 3.1 base score is 8.6, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and a scope change. The impact is availability-related, causing a high impact on availability without affecting confidentiality or integrity. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability can lead to a complete denial of service (availability impact) on the affected MoveTo product versions. It does not impact confidentiality or integrity according to the CVSS vector. Since no known exploits are reported, the threat is theoretical but potentially severe due to the high CVSS score and lack of authorization checks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected MoveTo instances and monitor for unusual activity related to unauthorized access attempts. No official remediation or temporary fix is currently documented.