This vulnerability in MeWare Software Development Inc.'s PDKS product allows unauthorized actors to access sensitive private personal information. It affects versions from V16.20200313 up to but not including VMYR_3.5.2025117. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, requiring low privileges and no user interaction, and resulting in high confidentiality impact without affecting integrity or availability. No official patch or vendor advisory detailing remediation is currently available.

The vulnerability results in unauthorized disclosure of sensitive private personal information, which can lead to privacy violations and potential misuse of exposed data. There is no indication of impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to affected versions and monitor for unusual access patterns related to sensitive information exposure. Avoid deploying affected versions in sensitive environments if possible.