This vulnerability in NordicMade Savoy (<= 3.0.8) permits an attacker to retrieve embedded sensitive system data without authorization. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, no user interaction, and only confidentiality impact. The issue is classified as exposure of sensitive system information to an unauthorized control sphere. No patch or mitigation details are provided in the available data.

An attacker can remotely access sensitive system information embedded within the affected Savoy product versions, potentially leading to information disclosure. There is no impact on system integrity or availability. This could aid attackers in further reconnaissance or targeted attacks but does not directly compromise system control or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected Savoy instances and monitor for unusual access patterns to sensitive data endpoints. Avoid exposing the affected versions to untrusted networks.