This vulnerability in wvp-GB28181-pro 2.7.4-20260107 involves improper validation of the deviceId/channelId parameter in the PlayController.java file of the Snapshot Endpoint component. An attacker can manipulate this argument to perform a path traversal attack, potentially accessing files outside the intended directory. The vulnerability is remotely exploitable without user interaction and requires low privileges. Although an exploit is publicly available, there is no official remediation or patch currently documented.

Successful exploitation allows an attacker to traverse the file system via crafted deviceId/channelId parameters, potentially exposing sensitive files or system information. The attack can be performed remotely with low complexity and no user interaction. The overall impact is rated medium due to limited privileges required and partial impact on confidentiality and integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the vulnerable endpoint and monitor for suspicious requests targeting deviceId/channelId parameters. Avoid exposing the service to untrusted networks where possible.