This vulnerability (CWE-352) in Smart Maintenance Mode allows attackers to perform CSRF attacks, potentially causing users to execute unintended actions. The affected versions include all up to 1.4.4. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. No patch or official fix has been disclosed by the vendor or in the advisory data.

The vulnerability can lead to limited integrity and availability impacts by tricking authenticated users into executing unwanted commands via CSRF. There is no impact on confidentiality. Since no known exploits are reported, the practical risk may be limited but remains present until mitigated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying request origins or using anti-CSRF tokens if possible. Monitor vendor channels for updates.