The iVEC-IEI Virtualization Edge Computer (iVEC TANK-XM811) contains an arbitrary file read vulnerability due to improper limitation of pathname input, enabling privileged remote attackers to access files beyond the intended directory boundaries. This path traversal issue is identified as CWE-22. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity) with network attack vector, low attack complexity, no user interaction, and high impact on confidentiality. No remediation level or patch information is currently available, and no known exploits are reported in the wild.

Privileged remote attackers can exploit this vulnerability to read arbitrary files outside the intended directory scope on the affected device. This can lead to unauthorized disclosure of sensitive information. The vulnerability does not affect integrity or availability according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, monitor vendor communications for updates. Restricting privileged remote access to the device may reduce exposure until a patch is available.