This vulnerability (CWE-306) in Liderahenk allows unauthorized remote attackers to access critical functions without authentication. This lack of authentication can be exploited to perform remote code inclusion, privilege abuse, and command injection attacks. The issue affects all versions prior to 3.5.1. The CVSS 3.1 vector indicates network attack vector with high attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow remote attackers to execute arbitrary code, escalate privileges, and compromise system integrity and availability. The vulnerability poses a significant risk to affected systems due to the critical nature of the unauthenticated functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected application and monitor for suspicious activity related to unauthenticated access attempts to critical functions.