This vulnerability in Insta InstaKNXServiceApp 1.2.3.1469 involves insufficient verification of data authenticity in the CreateWebClientAndDownloadFileList function within the Firmware Update Handler component. An attacker could remotely manipulate this function to bypass data authenticity checks. The attack complexity is high, and no privileges or user interaction are required. The vendor was contacted but did not respond, and no official remediation or patch is currently available.

Successful exploitation could allow an attacker to bypass data authenticity verification during firmware update handling, potentially leading to the acceptance of manipulated or malicious data. However, the attack is highly complex and difficult to execute, reducing the likelihood of exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is available, users should monitor for official updates from the vendor. Due to the complexity of exploitation, immediate urgent action may not be necessary but caution is advised.