The vulnerability identified as CVE-2025-52785 affects the softnwords SMM API through missing authorization checks, resulting in incorrect access control enforcement. This issue impacts all versions up to 6.0.31. The CVSS 3.1 score of 7.1 reflects a network attack vector with low attack complexity, requiring low privileges and no user interaction. The vulnerability does not compromise confidentiality but can cause integrity and availability issues. No official patch or remediation details are available from the vendor or other sources.

Exploitation of this vulnerability can lead to unauthorized actions within the SMM API, potentially causing integrity violations and high impact on availability. Confidential data is not directly affected. The lack of authorization checks means that attackers with low privileges might perform unauthorized operations, disrupting service or modifying data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the SMM API to trusted users and networks only. Monitor for unusual activity related to the API and apply any vendor recommendations once published.