This vulnerability affects Acrel Electrical Prepaid Cloud Platform 1.0 and arises from improper handling of the /bin.rar file within the Backup File Handler component. An attacker can remotely exploit this flaw to disclose sensitive information. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, no privileges or user interaction required, and low impact on confidentiality. Despite public disclosure of an exploit, the vendor has not issued any response or patch, and no remediation level is specified.

Successful exploitation can lead to unauthorized disclosure of information from the affected system. The impact is limited to information disclosure with low confidentiality impact as per the CVSS vector. There is no indication of integrity or availability impact. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch or workaround is available, organizations should monitor for updates from the vendor. Until a fix is provided, consider restricting network access to the affected platform where feasible to reduce exposure.