This vulnerability affects the Technostrobe HI-LED-WR120-G2 device running firmware version 5.5.0.1R6.03.30. An attacker can remotely manipulate the 'cwd' argument in the /fs file to perform unrestricted file uploads. This could allow unauthorized files to be uploaded to the device, potentially leading to further compromise. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability. The vendor has not provided any response or patch, and no official remediation is currently documented.

Successful exploitation allows an unauthenticated remote attacker to upload arbitrary files to the affected device, which may lead to unauthorized access or further attacks. The impact on confidentiality, integrity, and availability is rated as low to limited. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should consider limiting network exposure of the affected device and monitor for suspicious activity related to file uploads. Implement network-level controls to restrict access to the device where possible until an official fix is released.