This vulnerability in CoDesigner arises from missing authorization controls, allowing actions that should be restricted due to incorrectly configured access control levels. The CVSS score of 4.3 reflects a network attack vector with low complexity and requiring low privileges, no user interaction, and limited impact confined to availability. The issue affects all versions up to and including 4.29. No vendor advisory or patch information is provided, and it is not a cloud service, so remediation depends on vendor updates.

The impact is limited to availability degradation with no confidentiality or integrity compromise. Exploitation could cause partial denial of service or resource exhaustion but does not expose sensitive data or allow unauthorized data modification. No known exploits have been reported, indicating limited active threat at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations where possible to reduce exposure. Monitor for vendor updates and apply patches promptly once available.