This vulnerability affects 648540858 wvp-GB28181-pro version 2.7.4-20260107. It arises from improper validation of the deviceId/channelId input parameters in the Snapshot Endpoint component's PlayController.java file, allowing an attacker to perform path traversal attacks. Such attacks could potentially allow unauthorized access to files or directories outside the intended scope. The vulnerability can be triggered remotely without user interaction, and public exploit code exists. The CVSS 4.0 base score is 5.3, indicating medium severity. No vendor advisory or patch information is currently available.

Successful exploitation of this vulnerability could allow an attacker to access or manipulate files on the affected system by traversing directories via crafted deviceId/channelId parameters. This could lead to unauthorized disclosure or modification of sensitive data. The attack can be performed remotely without user interaction, increasing the risk of exploitation. However, the overall impact is rated medium based on the CVSS score and vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider restricting access to the affected endpoint and validating input parameters at the application or network level to mitigate exploitation risks.