This vulnerability in Brainstorm Force SureDash versions up to 1.0.3 is caused by incorrect privilege assignment, which allows an attacker with some privileges to escalate their privileges to a higher level without requiring user interaction. The CVSS 3.1 base score is 8.8, indicating high severity, with network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. No patch or vendor advisory is currently provided, and no known exploits have been observed.

Successful exploitation of this vulnerability could allow an attacker with limited privileges to escalate their privileges, potentially leading to full system compromise including unauthorized access to sensitive data, modification of data, and disruption of service. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to SureDash installations to trusted users only and monitor for suspicious privilege escalation attempts. Avoid granting unnecessary privileges to users to reduce risk.