This vulnerability allows an unauthenticated attacker with network access to the affected Teldat Regesta Smart HD-PLC device (version 11.02.05.10.02) to disclose sensitive privilege information. The attacker exploits the /upgrade/query.php endpoint with a crafted command parameter to retrieve version information that includes privileged data. No user interaction or prior authentication is required to exploit this issue. The vulnerability is categorized as CWE-201, involving insertion of sensitive information into sent data. No official remediation or patch has been documented as of the published date.

Successful exploitation results in unauthorized disclosure of privileged information from the affected device. This could potentially aid attackers in further attacks or reconnaissance. There is no indication of privilege escalation, denial of service, or code execution from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is documented, users should monitor vendor communications for updates. Restricting network access to the affected device and limiting exposure of the /upgrade/query.php endpoint may reduce risk until a patch is available.