This vulnerability in MeWare Software Development Inc.'s PDKS product arises from improper control of interaction frequency, classified under CWE-799. It allows an attacker with low privileges and no user interaction to perform flooding attacks that can impact the integrity and availability of the system. The affected versions include V16.20200313 up to but not including VMYR_3.5.2025117. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, but high integrity and availability impacts. There is no vendor advisory or patch information available at this time.

The vulnerability can be exploited remotely by an attacker with low privileges to flood the system, causing high impact on the integrity and availability of the affected PDKS product. Confidentiality is not impacted. This could lead to denial of service or disruption of normal operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, users should monitor vendor communications for updates. Until a patch is available, consider limiting exposure of the affected product to untrusted networks if possible.