This vulnerability in the ATA-AOF Mobile Application allows attackers to intercept sensitive information transmitted in cleartext and exploit hard-coded credentials embedded in the application. These issues enable authentication abuse and bypass, potentially granting unauthorized access to the application. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without any privileges or user interaction, with high impact on confidentiality and integrity, and low impact on availability. The affected versions are all prior to 20.06.2025. No official patch or fix has been documented yet.

Successful exploitation can result in attackers gaining unauthorized access to the application by bypassing authentication mechanisms. Sensitive information transmitted without encryption can be intercepted, compromising user credentials and data confidentiality. The integrity of authentication processes is undermined due to hard-coded credentials, increasing the risk of authentication abuse. Availability impact is low but confidentiality and integrity impacts are high.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using affected versions of the ATA-AOF Mobile Application in sensitive environments. Monitor for vendor updates and apply patches promptly once available. Consider network-level protections such as encrypted tunnels or VPNs to reduce exposure of cleartext transmissions.