This vulnerability affects the Technostrobe HI-LED-WR120-G2 device running firmware version 5.5.0.1R6.03.30. The issue lies in the index_config function of the /LoginCB file, which improperly handles authentication, enabling remote attackers to bypass authentication controls. The vulnerability is remotely exploitable without user interaction or privileges. Although the exploit has been publicly disclosed, the vendor has not issued any response or patch. No cloud service is involved, and no official remediation level is provided.

Successful exploitation allows an unauthenticated remote attacker to bypass authentication mechanisms on the affected device. This could lead to unauthorized access to device functions or configuration. The medium CVSS score reflects limited but significant impact due to improper authentication. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor for official updates. In the meantime, restricting network access to the device and implementing network-level controls may reduce exposure.