This vulnerability in Thinkware U3000 up to version 1.02.04 affects the TCP Service's PUT_FILE function handling the /tmp/wpa_supplicant.conf file. Improper access control due to manipulation of the path argument allows remote attackers to potentially access or modify files improperly. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity) with network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality, integrity, and availability impacts. The vendor was contacted but did not respond, and no patch or mitigation has been disclosed.

An attacker can remotely exploit this vulnerability without authentication or user interaction to bypass access controls on the /tmp/wpa_supplicant.conf file, potentially leading to unauthorized file access or modification. The impact is limited to confidentiality, integrity, and availability as indicated by the CVSS vector. No known exploits are currently observed in the wild.

No official patch or remediation has been provided by the vendor. Since the vendor did not respond to the disclosure, users should consider restricting network access to the affected TCP Service or isolating the device until a fix is available. Monitor vendor channels for any future updates or advisories. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.