This vulnerability affects the Technostrobe HI-LED-WR120-G2 device running firmware version 5.5.0.1R6.03.30. It involves an unknown function within the /fs file of the Configuration Data Handler component where manipulation of the File argument leads to information disclosure. The vulnerability can be exploited remotely without authentication or user interaction. The CVSS 4.0 base score is 6.9, indicating a medium severity level. No patch or official remediation has been provided by the vendor, and the exploit is publicly accessible.

Successful exploitation of this vulnerability allows a remote attacker to disclose sensitive information from the affected device. There is no evidence of privilege escalation, denial of service, or integrity impact. The information disclosure could potentially aid further attacks depending on the nature of the leaked data. No active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should monitor for updates from Technostrobe. Until a patch is released, consider restricting remote access to the device and applying network-level controls to limit exposure.