This vulnerability (CVE-2025-10174) affects PanCafe Pro versions earlier than 3.3.2 and is categorized under CWE-319, which involves the cleartext transmission of sensitive information. The issue allows an attacker to perform flooding attacks by exploiting the transmission of sensitive data without encryption or adequate protection. The CVSS v3.1 score of 8.3 reflects high impact on confidentiality (high), integrity (low), and availability (high), with attack vector being adjacent network, no privileges required, and no user interaction needed.

The vulnerability can lead to exposure of sensitive information transmitted in cleartext, compromising confidentiality. Additionally, it enables flooding attacks that can disrupt service availability. The integrity impact is low. No known exploits in the wild have been reported, but the high CVSS score indicates a serious risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix information is provided, users should monitor vendor communications for updates. Until a fix is available, consider limiting network exposure of affected versions and applying network-level protections against flooding attacks where possible.