The vulnerability identified as CVE-2024-43940 affects the Z Y N I T H product by VIICTORY MEDIA LLC, where certain functionality can be accessed without proper authorization due to missing or inadequate ACL enforcement. This issue impacts versions up to 7.4.9. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. There is no vendor advisory or patch available, and the product is not a cloud service.

The vulnerability allows an attacker to access functionality that should be restricted, potentially leading to unauthorized actions that affect the integrity and availability of the system. Confidentiality is not impacted. Since no exploits are known in the wild, the immediate risk may be limited, but the medium severity score indicates a meaningful risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and strengthen access control configurations where possible to limit exposure. Monitor vendor communications for updates on patches or official mitigations.