This vulnerability in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30 involves missing authorization checks in the deletefile function of the FsBrowseClean component. An attacker can remotely manipulate the dir/path argument to bypass authorization controls, potentially allowing unauthorized deletion of files. The vulnerability is remotely exploitable without requiring privileges or user interaction. The vendor has not provided a fix or advisory, and no official remediation level is indicated.

An attacker can remotely exploit this vulnerability to bypass authorization controls in the deletefile function, potentially leading to unauthorized deletion of files on the affected device. This could disrupt device operation or data integrity. The CVSS 4.0 base score is 6.9 (medium severity), reflecting the network attack vector, lack of required privileges, and potential impact on availability and integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is publicly available, users should monitor official channels for updates. Until a fix is released, consider restricting network access to the affected device to trusted sources to reduce exposure.