This vulnerability in EShare ESharePro permits an attacker with local network access and low privileges to circumvent rate-limiting controls designed to protect the screen-sharing code from brute-force attacks. Exploiting this flaw could allow the attacker to repeatedly attempt to guess the screen-sharing code without restriction, potentially resulting in unauthorized screen sharing and the display of harmful content. The CVSS vector indicates local attack vector, low complexity, low privileges required, no user interaction, and limited confidentiality impact.

An attacker on the local network can bypass rate-limiting protections to brute-force the screen-sharing code. This may lead to unauthorized access to the screen-sharing session and the potential display of harmful or malicious content on the victim's screen. The confidentiality impact is limited, and there is no impact on integrity or availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local network access to trusted users and monitor for unusual screen-sharing activity. No official fix or temporary workaround has been documented at this time.