This vulnerability in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30 involves an unknown function within the /fs file of the Configuration Data Handler component. Manipulating the File argument can lead to unauthorized information disclosure. The attack vector is network-based, requiring no privileges or user interaction, and the vulnerability has low complexity and no scope change. The vendor was notified but has not issued any response or patch. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation allows an unauthenticated remote attacker to disclose sensitive information from the affected device. This could potentially expose configuration or operational data, which may aid further attacks or compromise confidentiality. There is no indication of impact on integrity or availability. No known exploitation in the wild has been reported.

No official patch or remediation is currently available, and the vendor has not responded to the disclosure. Users should monitor for any future vendor advisories or updates. In the absence of a fix, consider limiting network exposure of the affected device to trusted networks only to reduce the attack surface. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.