This vulnerability in Thinkware U3000 up to version 1.02.04 involves the GET_STATUS function of the TCP Service component. By manipulating the wifi_info argument remotely, an attacker can cause information disclosure. The vulnerability has been publicly disclosed with an exploit available, but the vendor has not provided any response or patch. The CVSS 4.0 vector indicates it is remotely exploitable without privileges or user interaction, with low impact on confidentiality but no impact on integrity or availability.

An attacker can remotely exploit this vulnerability to disclose information from the device by manipulating the wifi_info argument in the GET_STATUS function. This could lead to unauthorized access to sensitive data. There is no indication of impact on system integrity or availability. No known active exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor. Since the vendor did not respond to the disclosure, users should monitor vendor channels for updates. Until a fix is released, consider restricting network access to the affected service to trusted sources to reduce exposure.