This vulnerability (CVE-2025-69428) affects Pro-Bit software versions prior to 1.77.4. It allows attackers without any authentication to access sensitive directories and their subdirectories directly, violating confidentiality (CWE-552). The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact. No official remediation or patch information is provided, and the software is not a cloud service, so remediation depends on vendor updates.

Successful exploitation results in unauthorized disclosure of sensitive directory contents, potentially exposing confidential information. There is no impact on integrity or availability reported. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor vendor communications for updates. Until a patch is available, restricting network access to the affected service or implementing compensating controls to limit directory access may reduce exposure.