This vulnerability affects the Technostrobe HI-LED-WR120-G2 device running firmware version 5.5.0.1R6.03.30. It is caused by improper access controls in an unspecified function of the /Technostrobe/ file within the endpoint component. The flaw allows remote attackers to manipulate access controls, potentially leading to unauthorized actions. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. The vendor has not provided any advisory or patch, and the exploit code has been made public. No cloud service is involved, and multiple endpoints are impacted.

The vulnerability allows remote attackers to bypass access controls on the affected device, potentially enabling unauthorized access or actions on the endpoint. The exact impact is not detailed beyond improper access control manipulation. No evidence of exploitation in the wild is reported. The medium CVSS score reflects the potential for significant but not critical impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a patch is available, consider limiting network exposure of affected devices and applying network-level access controls to reduce risk.