This vulnerability in enituretechnology Residential Address Detection (up to version 2.5.9) is due to missing authorization checks, which allows unauthorized users to access certain functionality that should be restricted by ACLs. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but low integrity impact. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized access to functionality that should be protected by authorization controls, potentially leading to unauthorized modification or manipulation of data (integrity impact). There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected product and monitor for unusual activity related to unauthorized functionality access. Avoid exposing the vulnerable version to untrusted networks where possible.