This vulnerability affects Technostrobe HI-LED-WR120-G2 version 5.5.0.1R6.03.30 and is characterized by improper access controls in an unspecified function of the /Technostrobe/ endpoint component. The flaw allows remote attackers to manipulate access controls, potentially leading to unauthorized access or actions. The CVSS 4.0 base score is 6.9, indicating a medium severity level, with attack vector network, low complexity, no privileges or user interaction required, and low impact on confidentiality, integrity, and availability. The vendor has not provided any advisory or patch, and the exploit code is publicly available.

The vulnerability allows remote attackers to bypass access controls on the affected device, potentially leading to unauthorized access or manipulation of the device's functions. The impact on confidentiality, integrity, and availability is rated low, but the lack of authentication and user interaction requirements increases the risk. No known exploits in the wild have been reported, but public exploit availability increases the potential threat.

No official patch or remediation is currently available from the vendor, as they have not responded to the disclosure. Users should monitor for any future vendor advisories or updates. Until a fix is released, consider limiting network exposure of the affected device and applying network-level access controls to restrict remote access where possible.