This vulnerability in Caterease software arises from improper verification of the source of a communication channel, enabling remote attackers to inject malicious traffic. The affected versions range from exactly 16.0.1.1663 up to and including 24.0.1.2405, and potentially later versions. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, with critical impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no vendor advisory or patch links are currently available.

Successful exploitation allows remote attackers to inject malicious traffic into the communication channel of the affected Caterease software. This can lead to full compromise of confidentiality, integrity, and availability of the system, potentially disrupting business operations and exposing sensitive data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor vendor communications closely. No specific temporary mitigations are provided in the available data.