This vulnerability in ZAYTECH Smart Online Order for Clover (up to version 1.6.0) enables an attacker to bypass authentication mechanisms by leveraging an alternate path or communication channel. The CVSS 3.1 base score of 7.3 reflects that the attack can be performed remotely without privileges or user interaction, and can lead to partial loss of confidentiality, integrity, and availability of the affected system. No vendor advisory or patch information is provided, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation allows an unauthenticated attacker to bypass authentication controls, potentially gaining unauthorized access to the application. This can lead to partial compromise of data confidentiality, integrity, and availability within the affected Smart Online Order for Clover environment. The vulnerability is rated high severity due to its remote exploitability and impact on core security properties.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected application to trusted networks or users where feasible.