This vulnerability in Asseco SEE Live 2.0 arises from insecure access control in multiple communication components (Contact Plan, E-Mail, SMS, and Fax). Remote attackers with some privileges can exploit computable URLs to access and execute attachments remotely without requiring user interaction. The issue is classified under CWE-284 (Improper Access Control) and carries a critical CVSS 3.1 score of 9.9, reflecting network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided.

Successful exploitation allows remote attackers with limited privileges to access and execute attachments, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system components. This could result in unauthorized data access, execution of malicious code, and disruption of communication services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected components and monitor for suspicious URL access patterns. Avoid exposing the vulnerable components to untrusted networks where possible.