This vulnerability in Brainstorm Force SureDash (<=1.8.0) involves improper limitation of a pathname to a restricted directory, commonly known as a path traversal flaw. This allows an attacker with low privileges and no user interaction to potentially access or modify files outside the intended directory scope, leading to complete compromise of confidentiality, integrity, and availability of the affected system. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) reflects network attack vector, low attack complexity, low privileges required, no user interaction, and a scope change with high impact on all security properties.

Successful exploitation could allow an attacker to read, modify, or delete arbitrary files on the affected system, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability at a critical level. No known exploits are reported in the wild yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published by Brainstorm Force as of now. Users should monitor vendor communications for updates and consider restricting access to SureDash installations to trusted users only until a fix is available.